TI-2023-00877 CVE-2023-0926 · GHSA-qhg4-f6mr-54g9Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site ScriptingPriority MEDIUM 58The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00321 · Published 2024-08-24 · No fix listed CWE-79