cve/2018/CVE-2018-7543.md

CVE-2018-7543

Description

Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.

POC

Reference

• https://www.exploit-db.com/exploits/44288/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/VTFoundation/vulnerablewp
• https://github.com/waleedzafar68/vulnerablewp