6.1Media
Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting
mbis Permalink Manager Lite; mbis Permalink Manager Pro; permalink_manager_lite_project permalink_manager_lite; permalink_manager_project permalink_manager
The Permalink Manager Lite and Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in multiple instances in all versions up to, and including, 2.4.3.1 due to insufficient input sanitization and output escaping. Thi…