Not rated
CVE-2021-24994 The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages,…
Description
The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Migration, Backup, Staging – WPvivid Backup and Migration Plugin 0.9 | earliest → < 0.9.69 | 0.9.69 |