Stored Cross-Site Scripting in Permalink Manager Lite for WordPress

CVE-2022-4410

What is CVE-2022-4410?

The Permalink Manager Lite plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate output escaping on various titles, including post, page, and media titles. This vulnerability allows attackers to inject harmful web scripts on the permalink-manager page, particularly if other plugins or themes are present that enable lower-privileged users to modify these titles without appropriate filtering. Site administrators should ensure that their installations are updated to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References