Post Duplicator, b8def1faf168606b25cd85fe69733d55d6f145b0

CVE, Research URL: b8def1faf168606b25cd85fe69733d55d6f145b0
Home page URL: Security reports for Post Duplicator
Application: Post Duplicator
Published on: Apr 06, 2016
Research Description: Post Duplicator [post-duplicator] < 2.17 Post Duplicator <= 2.16 - Reflected Cross-Site Scripting The Post Duplicator plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 2.16 due to insufficient input sanitization and output escaping on the 'post-duplicated' parameter. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 2.17.
Status: vulnerable