CVE-2026-8494 | mbis Permalink Manager Lite Plugin up to 2.5.3.3 on WordPress Admin URI Editor Interface cross site scripting (EUVD-2026-37563)

A vulnerability classified as problematic has been found in mbis Permalink Manager Lite Plugin up to 2.5.3.3 on WordPress. The affected element is an unknown function of the component Admin URI Editor Interface. This manipulation causes cross site scripting. The identification of this vulnerability is CVE-2026-8494. It is possible to initiate the attack remotely. There is no exploit available.