Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Obtain Infotech Component: Multisite Content Copier/updater Clear all filters
TI-2022-00423 CVE-2022-0503 · GHSA-wmhj-5vx8-p7q5

Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 Fixed in 2.1.2 CWE-79
TI-2021-07317 CVE-2021-25039 · GHSA-6pq3-4268-89g5

Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attribu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-07 Fixed in 2.1.0 CWE-79