Non notée
CVE-2021-24322 The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before…
Description
The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Database Backup for WordPress 2.4 | premières → < 2.4 | 2.4 |