Read the docs

Obtain Infotech

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Obtain Infotech records in CISA KEV

No Obtain Infotech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Multisite Content Copier/updater 2 records LOW Multisite User Sync/unsync 1 record LOW

Records

4 records

TI-2024-25908 CVE-2024-38673 · GHSA-g5jm-r5mc-32gv

WordPress Multisite Content Copier/Updater plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Obtain Infotech Multisite Content Copier/Updater allows Reflected XSS.This issue affects Multisite Content Copi…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-07-20 No fix listed CWE-79
TI-2022-00423 CVE-2022-0503 · GHSA-wmhj-5vx8-p7q5

Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 Fixed in 2.1.2 CWE-79
TI-2021-07317 CVE-2021-25039 · GHSA-6pq3-4268-89g5

Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attribu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-07 Fixed in 2.1.0 CWE-79
TI-2021-07316 CVE-2021-25038 · GHSA-94m2-cmhh-rr95

Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmus_source_blog and wmus_record_per_page parameters before outputting them back in attributes, leading to Reflected…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-07 Fixed in 2.1.2 CWE-79
Open these records in search →