CVE-2026-122222

The Permalink Manager Lite plugin for WordPress (versions ¢= 2.6.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the 'slug' parameter due to insufficient input sanitization and output escaping. An authenticated attacker with Author-level access or higher can submit a p...