CVE-2021-33852: XSS

Published Mar 9, 2022

Updated

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Duplicate Title" text box executes whenever the user opens the Settings Page of the Post Duplicator Plugin or the application root page after duplicating any of the existing posts.

Affected Software

1 affected component

metaphorcreations Post Duplicator Wordpress=2.23

Event History

Mar 9, 2022

CVE Published

via MITRE·04:54 PM

Data Sourced

via MITRE·04:54 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-33852?

CVE-2021-33852 is classified as a high-severity vulnerability due to its potential for executing arbitrary JavaScript in a user's browser.

How do I fix CVE-2021-33852?

To fix CVE-2021-33852, it is recommended to update the Metaphor Creations Post Duplicator plugin to the latest version that addresses this vulnerability.

What should I do if I can't update to a patched version for CVE-2021-33852?

If you cannot update to a patched version for CVE-2021-33852, consider disabling the Post Duplicator plugin to mitigate the risk of XSS attacks.

What type of attack is CVE-2021-33852 associated with?

CVE-2021-33852 is associated with a cross-site scripting (XSS) attack that allows an attacker to run arbitrary code in a user's browser.

Which software versions are affected by CVE-2021-33852?

CVE-2021-33852 affects version 2.23 of the Metaphor Creations Post Duplicator plugin used in WordPress.