← Back

Samiahmedsiddiqui

samiahmedsiddiqui

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Custom Permalinks
custom_permalinks
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0926
1Samiahmedsiddiqui
1Custom Permalinks
Jun 17, 2026
Aug 24, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names. This allows authent...Show more
The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names. This allows authenticated users, with editor-level permissions or greater to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, even when 'unfiltered_html' has been disabled.Show less