Threats tagged 'ghsa-4347-wh28-8rhq'

The Duplicator and Duplicator Pro WordPress plugins before version 5.1.0 contain a reflected cross-site scripting (XSS) vulnerability. This occurs because a parameter is not properly sanitized and escaped before being reflected on an administrative page. The vulnerability can be exploited if a logged-in administrator is tricked into clicking a crafted link, allowing execution of arbitrary script in their session.