VYPR

Custom Permalinks

by WordPress

CVEs (1)

  • CVE-2023-0926MedAug 24, 2024
    risk 0.22cvss 4.4epss 0.00

    The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names. This allows authenticated users, with editor-level permissions or greater to…