Duplicator - installer.cleanup.php package Parameter XSS

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by an installer.cleanup.php package Parameter XSS security vulnerability...

CVE-2013-4625

The CVE-2013-4625 entry concerns WordPress Duplicator Plugin (vulnerable up to 0.4.4, fixed in 0.4.5). The vulnerability is an XSS in files/installer.cleanup.php where the package parameter is insufficiently sanitized, allowing remote attackers to inject arbitrary script/HTML. Evidence from multi...

CVE-2013-4625: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter...

PT-2013-5104

Name of the Vulnerable Software and Affected Versions Duplicator plugin versions prior to 0.4.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the package parameter in the files/installer.cleanup.php file. Recommendations For versio...