PT-2022-13221

Name of the Vulnerable Software and Affected Versions WordPress Multisite Content Copier/Updater plugin versions prior to 2.1.2 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the s parameter is not properly sanitized and escaped before being...

CVE-2022-0503: Improper Neutralization of Input During Web Page Generation

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard...

PT-2022-9596

Name of the Vulnerable Software and Affected Versions WordPress Multisite Content Copier/Updater plugin versions prior to 2.1.0 Description The issue is related to Reflected Cross-Site Scripting, where the wmcc content type, wmcc source blog, and wmcc record per page parameters are not properly...

CVE-2021-25039: Improper Neutralization of Input During Web Page Generation

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...