CVE-2022-4410

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) through improper output escaping on post/page/media titles, affecting versions up to and including 2.2.20.3. An attacker can inject arbitrary scripts on the permalink-manager page if another plugin ...