CVE-2022-0201

MEDIUMNuclei

Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-0201 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Permalink Manager Lite

Browse Maciej Bis / Permalink Manager Lite
CVE List2.2.15 to < 2.2.15affected

Permalink Manager Pro

Browse Maciej Bis / Permalink Manager Pro
CVE List2.2.15 to < 2.2.15affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Permalink Manager <2.2.15 - Cross-Site ScriptingCVSS 6.1

WordPress Permalink Manager Lite and Pro plugins before 2.2.15 contain a reflected cross-site scripting vulnerability. They do not sanitize and escape query parameters before outputting them back in the debug page.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.

Remediation

Update to WordPress Permalink Manager version 2.2.15 or later to mitigate the vulnerability.

WeaknessesCWE-79
AuthorsAkincibor
Template tagscvecve2022wp-pluginwpscanxsswordpresspermalink_manager_lite_projectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:permalink_manager_lite_project:permalink_manager_lite:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/f274b0d8-74bf-43de-9051-29ce36d78ad4 https://plugins.trac.wordpress.org/changeset/2656512 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3