2 matches found
CVE-2017-16815
installer.php in the Snap Creek Duplicator WordPress Site Migration & Backup plugin before 1.2.30 for WordPress has XSS because the values "urlnew" /wp-content/plugins/duplicator/installer/build/view.step4.php and "logging" wp-content/plugins/duplicator/installer/build/view.step2.php are not...
6.1CVSS6.2AI score0.01017EPSS
SaveExploits0References1
CVE-2017-16815: Improper Neutralization of Input During Web Page Generation
installer.php in the Snap Creek Duplicator WordPress Site Migration & Backup plugin before 1.2.30 for WordPress has XSS because the values "urlnew" /wp-content/plugins/duplicator/installer/build/view.step4.php and "logging" wp-content/plugins/duplicator/installer/build/view.step2.php are not...
6.1CVSS6.3AI score0.01017EPSS
SaveExploits0References2
20