Skip to content
OpenAdvisories
High · 7.1 CVE-2025-52760 EUVD-2025-35476GHSA-v3pc-fqvc-3w7q

WordPress MultiSite Clone Duplicator plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Globalis MultiSite Clone Duplicator multisite-clone-duplicator allows Reflected XSS.This issue affects MultiSite Clone Duplicator: from n/a through <= 1.5.3.

Affected products

VendorProductAffectedFixed
Globalis MultiSite Clone Duplicator ≤ 1.5.3 —

References