Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Obtain Infotech Clear all filters
TI-2024-25908 CVE-2024-38673 · GHSA-g5jm-r5mc-32gv

WordPress Multisite Content Copier/Updater plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Obtain Infotech Multisite Content Copier/Updater allows Reflected XSS.This issue affects Multisite Content Copi…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-07-20 No fix listed CWE-79
TI-2022-00423 CVE-2022-0503 · GHSA-wmhj-5vx8-p7q5

Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 Fixed in 2.1.2 CWE-79
TI-2021-07317 CVE-2021-25039 · GHSA-6pq3-4268-89g5

Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attribu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-07 Fixed in 2.1.0 CWE-79
TI-2021-07316 CVE-2021-25038 · GHSA-94m2-cmhh-rr95

Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting

Priority LOW 29

The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmus_source_blog and wmus_record_per_page parameters before outputting them back in attributes, leading to Reflected…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-07 Fixed in 2.1.2 CWE-79