Threats tagged 'ghsa-5v63-48m3-rm32'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-122222The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slug' parameter Medium6.42026-11-06GCVE DatabaseCVE-2026-122222 The Permalink Manager Lite plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'slug' parameter affecting all versions up to and including 2.6.1. Authenticated users with author-level access or higher can inject malicious scripts via the REST API, which execute in administrator browsers when the URI Editor admin page is accessed. Report on CVE-2026-122222 Vulnerability CWE-79 #ghsa-5v63-48m3-rm32	GCVE Database	2026-11-06

Page 1 of 1