CVE-2021-25039 Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25039

The CVE-2021-25039 entry concerns the WordPress Multisite Content Copier/Updater plugin (before 2.1.0). The vulnerability arises from insufficient sanitization/escaping of the parameters wmcc_content_type, wmcc_source_blog, and wmcc_record_per_page, which are echoed back in attributes, enabling r...