cleantalk
Vulnerabilities and Security Researches

Duplicator – WordPress Migration & Backup Plugin, CVE-2013-4625

CVE, Research URL

CVE-2013-4625

Published on
Aug 10, 2013
Research Description
Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter.
Affected versions
Min -, max 0.4.5.
Status
vulnerable