Not rated
CVE-2021-24322 The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before…
Description
The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Database Backup for WordPress 2.4 | earliest → < 2.4 | 2.4 |