Skip to content
Sign in
Not rated

CVE-2021-24423 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings,…

Description

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue

Affected products and versions

Product Affected versions Fixed in
UpdraftPlus WordPress Backup Plugin 1.6 earliest → < 1.6.59 1.6.59

Other CVEs of UpdraftPlus WordPress Backup Plugin

The 4 CVEs of UpdraftPlus WordPress Backup Plugin →
CVE-2022-0864 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval… Not rated CVE-2021-25089 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore… Not rated CVE-2021-25022 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the… 6.1 Medium
Track this CVE