Non notée
CVE-2021-24423 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings,…
Description
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UpdraftPlus WordPress Backup Plugin 1.6 | premières → < 1.6.59 | 1.6.59 |
Autres CVE de UpdraftPlus WordPress Backup Plugin
Les 4 CVE de UpdraftPlus WordPress Backup Plugin →
CVE-2022-0864
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval…
Non notée
CVE-2021-25089
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore…
Non notée
CVE-2021-25022
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the…
6.1
Moyenne