Skip to content
OpenAdvisories

Vendor

sasiddiqui

1 known vulnerabilities.

Products

Custom Permalinks 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2023-0926

    Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scripting

    The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names. This allows authenticated users, with editor-level permiss…

    sasiddiqui Custom Permalinks Web / CMS