Lucene search
WpvulndbWPVDB-ID:004A4516-7704-40DF-B939-7A8CEEB7E7DEHistoryDec 14, 2022 - 12:00 a.m.
Permalink Manager Lite < 2.3.0 - Authenticated Stored XSS
2022-12-1400:00:00
wpscan.com
12
plugin
escape
page/post
media
titles
attackers
stored xss
low privilege users
blog
EPSS
0.001
Percentile
19.6%
The plugin does not escape page/post and media titles, which could allow attackers to perform Stored XSS attacks when another plugin/theme allowing low privilege users to modify such titles is active on the blog as well
Related
prion
prion
Cross site scripting
2022-12-14 22:15:00
nvd
nvd
CVE-2022-4410
2022-12-14 22:15:11
cve
cve
CVE-2022-4410
2022-12-14 22:15:11
cvelist
cvelist
CVE-2022-4410
2022-12-14 21:20:13