Lucene search

VulDBCVE-2016-15027

HistoryFeb 20, 2023 - 5:15 p.m.

CVE-2016-15027

2023-02-2017:15:11

CWE-79

VulDB

web.nvd.nist.gov

cve-2016-15027

meta4creations

post duplicator plugin

wordpress

cross site scripting

vulnerability

upgrade

patch

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

37.4%

JSON

A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress. It has been classified as problematic. Affected is the function mtphr_post_duplicator_notice of the file includes/notices.php. The manipulation of the argument post-duplicated leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.19 is able to address this issue. The name of the patch is ca67c05e490c0cf93a1e9b2d93bfeff3dd96f594. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221496.

Affected configurations

Nvd

Vulners

Node

metaphorcreationspost_duplicatorMatch2.18wordpress

VendorProductVersionCPE
metaphorcreationspost_duplicator2.18cpe:2.3:a:metaphorcreations:post_duplicator:2.18:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
metaphorcreations	post_duplicator	2.18	cpe:2.3:a:metaphorcreations:post_duplicator:2.18:::::wordpress::

CNA Affected

[
  {
    "vendor": "meta4creations",
    "product": "Post Duplicator Plugin",
    "versions": [
      {
        "version": "2.18",
        "status": "affected"
      }
    ]
  }
]

References

github.com/meta4creations/post-duplicator/commit/ca67c05e490c0cf93a1e9b2d93bfeff3dd96f594

github.com/meta4creations/post-duplicator/releases/tag/2.19

vuldb.com/?ctiid.221496

vuldb.com/?id.221496

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

37.4%

JSON

Related for CVE-2016-15027