CVE-2018-7543 Duplicator <= 1.2.32 - Cross-Site Scripting
MediumCVSS 6.1
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress duplicator(WordPress) | < 1.2.33 | 1.2.33 |
| Awesomemotive duplicator | = 1.2.32 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- snapcreek.com vendor-advisory
- 44288 exploit third-party-advisory vdb-entry