WordPress Duplicator 0.4.4 Cross Site Scripting

Advisory ID: HTB23162 Product: Duplicator WordPress Plugin Vendor: LifeInTheGrid Vulnerable Versions: 0.4.4 and probably prior Tested Version: 0.4.4 Vendor Notification: June 19, 2013 Vendor Patch: July 21, 2013 Public Disclosure: July 24, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...

Cross-Site Scripting (XSS) in Duplicator WordPress Plugin

High-Tech Bridge Security Research Lab discovered XSS vulnerability in Duplicator WordPress plugin, which can be exploited to perform cross-site scripting attacks against vulnerable application. 1 Cross-Site Scripting XSS in Duplicator WordPress Plugin: CVE-2013-4625 The vulnerability exists due ...