CVE-2025-31471

Name of the Vulnerable Software and Affected Versions Duplicate Page and Post versions n/a through 1.0

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into a website, potentially affecting users who access the compromised page.

Recommendations For versions n/a through 1.0, consider disabling the functionality that allows user input to be stored and displayed on web pages until a patch is available. Restrict access to the Duplicate Page and Post plugin to minimize the risk of exploitation. Avoid using the plugin until the issue is resolved.