CVE-2017-16815

Name: CVE-2017-16815
Creator: NVD / NIST
Published: 2017-11-14T19:29:00.197+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.02%

Last modified Jun 17, 2026

CVE-2017-16815 is a vulnerability of currently unknown severity. installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new" (/wp-content/plugins/duplicator/installer/build/view.step4.php) and "logging" (wp-content/plugins/duplicator/installer/build/view.step2.php) are not filtered correctly.. EPSS estimates a 1.02% chance of exploitation in the next 30 days.

Description

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new" (/wp-content/plugins/duplicator/installer/build/view.step4.php) and "logging" (wp-content/plugins/duplicator/installer/build/view.step2.php) are not filtered correctly.

Metrics

EPSS Probability

1.02%

58.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Snapcreek	Duplicator	1.2.28

References

https://packetstormsecurity.com/files/144914/WordPress-Duplicator-Migration-1.2.28-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
https://snapcreek.com/duplicator/docs/changelogRelease Notes, Vendor Advisory
https://packetstormsecurity.com/files/144914/WordPress-Duplicator-Migration-1.2.28-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
https://snapcreek.com/duplicator/docs/changelogRelease Notes, Vendor Advisory

Timeline

Published: Nov 14, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-16815?

How severe is CVE-2017-16815?

Severity scoring for CVE-2017-16815 is pending analysis. The EPSS model estimates a 1.02% probability of exploitation in the next 30 days.

How do I fix CVE-2017-16815?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-16815?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST