CVE-2022-0201

Published: 2022-02-14T12:15Z

Last Modified: 2024-11-21T06:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue > MITRE Terms of Use apply – see LICENSE‑MITRE.txt