Skip to content
Sign in
Not rated

CVE-2021-25035 The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error…

Description

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
Backup and Staging by WP Time Capsule 1.22 earliest → < 1.22.7 1.22.7

Other CVEs of Backup and Staging by WP Time Capsule

The 2 CVEs of Backup and Staging by WP Time Capsule →
CVE-2026-107237 The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on… 8.2 High
Track this CVE