CVE-2016-15027 – meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting

https://notcve.org/view.php?id=CVE-2016-15027

A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress. It has been classified as problematic. Affected is the function mtphr_post_duplicator_notice of the file includes/notices.php. The manipulation of the argument post-duplicated leads to cross site scripting. It is possible to launch the attack remotely. • https://github.com/meta4creations/post-duplicator/commit/ca67c05e490c0cf93a1e9b2d93bfeff3dd96f594 https://github.com/meta4creations/post-duplicator/releases/tag/2.19 https://vuldb.com/?ctiid.221496 https://vuldb.com/?id.221496 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •