CVE-2024-37257

CVE-2024-37257 describes a Reflected XSS in Permalink Manager Lite (WordPress plugin) affecting versions up to 2.4.3.3. The vulnerability is due to improper neutralization of input during web page generation. Connected sources note the vulnerability is patched, but the exact fixed version is not ...

WordPress Permalink Manager Lite Plugin <= 2.4.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Permalink Manager Lite Type Plugin Vulnerable versions = 2.4.3.3 Fixed in 2.4.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37257 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ec5eb6c45f Credits Rafie Muhammad...