WordPress Snap Creek Duplicator (WordPress Site Migration&Backup) plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports a personal blog site set up on a server in PHP and MySQL.Snap Creek Duplicator WordPress Site Migration&Backup is one of the WordPress backup migration plugin. A...

CVE-2017-16815

installer.php in the Snap Creek Duplicator WordPress Site Migration & Backup plugin before 1.2.30 for WordPress has XSS because the values "urlnew" /wp-content/plugins/duplicator/installer/build/view.step4.php and "logging" wp-content/plugins/duplicator/installer/build/view.step2.php are not...

PT-2017-14578

Name of the Vulnerable Software and Affected Versions Duplicator WordPress Site Migration & Backup plugin versions prior to 1.2.30 Description The issue arises from insufficient filtering of the url new and logging values in the installer.php file. This can lead to XSS attacks. The url new value ...