PRIOn knowledge basePRION:CVE-2013-4625Cross site scripting
6.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.0%
Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| duplicator | le | 0.4.4 | |
| duplicator | eq | 0.4.2 | |
| duplicator | eq | 0.4.3 |
References
archives.neohapsis.com/archives/bugtraq/2013-07/0161.html
osvdb.org/95627
packetstormsecurity.com/files/122535/WordPress-Duplicator-0.4.4-Cross-Site-Scripting.html
support.lifeinthegrid.com/knowledgebase.php?article=20
www.securityfocus.com/bid/61425
exchange.xforce.ibmcloud.com/vulnerabilities/85939
www.htbridge.com/advisory/HTB23162
Related
6.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.0%