Permalink Manager Lite, CVE-2022-0201

CVE, Research URL: CVE-2022-0201
Home page URL: Security reports for Permalink Manager Lite
Application: Permalink Manager Lite
Published on: Feb 14, 2022
Research Description: The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue
Affected versions: max 2.2.15.
Status: vulnerable