Lucene search
PRIOn knowledge basePRION:CVE-2017-16815HistoryNov 14, 2017 - 7:29 p.m.
Design/Logic Flaw
2017-11-1419:29:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
35.4%
installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values “url_new” (/wp-content/plugins/duplicator/installer/build/view.step4.php) and “logging” (wp-content/plugins/duplicator/installer/build/view.step2.php) are not filtered correctly.
| CPE | Name | Operator | Version |
|---|---|---|---|
| duplicator | eq | 1.2.28 |
Related
patchstack
patchstack
openvas
openvas
WordPress Duplicator Plugin < 1.2.30 XSS Vulnerability
2017-11-17 00:00:00
nvd
nvd
CVE-2017-16815
2017-11-14 19:29:00
threatpost
threatpost
Old WordPress Plugin Being Exploited in RCE Attacks
2018-09-17 17:19:25
wpvulndb
wpvulndb
Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting (XSS)
2017-11-07 00:00:00
cve
cve
CVE-2017-16815
2022-10-03 16:23:21
cvelist
cvelist
CVE-2017-16815
2022-10-03 16:23:21