Non notée
CVE-2021-24994 The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages,…
Description
The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Migration, Backup, Staging – WPvivid Backup and Migration Plugin 0.9 | premières → < 0.9.69 | 0.9.69 |