Multisite Content Copier/Updater Pro < 2.1.2 - Reflected Cross-Site Scripting
mediumThe WordPress Multisite Content Copier/Updater Pro before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard
- CVSS:
- 6.1
- Affected:
- up to 2.1.2
- Fixed in:
- 2.1.2
- Disclosed:
- Feb 21, 2022