cleantalk
Vulnerabilities and Security Researches

Copy or Move Comments, a9725906c4e79783f0e4f70ce0a956d03ef4d430

Application

Copy or Move Comments

Published on
Jun 21, 2023
Research Description
Copy or Move Comments [copy-or-move-comments] < 1.0.1 (closed) WordPress Copy Or Move Comments Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS) Update the plugin. Morten Nørtoft discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Copy Or Move Comments Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.0.1.
Affected versions
max 1.0.1.
Status
vulnerable