Duplicate Post <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS)

Description

The Duplicate Post plugin was vulnerable to Authenticated Stored Cross-Site Scripting (XSS). However, the POST request had a CSRF nonce that was verified, and no user's without the unfiltered_html capability, such as Author or Subscriber, were able to access the affected Duplicate Post settings page. Therefore, this vulnerability would be very difficult to exploit in the real world. The risk of this issue is very low.