CVE

CVE-2022-0201

6.1

CVSS

Description

The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue

Attack Vector

Privileges Req.

User Interaction

permalink manager litepermalink manager pro

Updated Sep 18, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0201 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in Permalink Manager plugin for WordPress affects v. before 2.2.15.

Used 3k times · 5.9k assets checked · url

Scanner page →Run scanner

CVE history: permalink manager lite

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →