← back
CVE-2022-2093

WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting

EPSS 0.5%CWE-79
The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →