6.1
Moyenne
CVE-2021-25022 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the…
Description
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestamp and job_id parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UpdraftPlus WordPress Backup Plugin 1.16 | premières → < 1.16.66 | 1.16.66 |
Autres CVE de UpdraftPlus WordPress Backup Plugin
Les 4 CVE de UpdraftPlus WordPress Backup Plugin →
CVE-2022-0864
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval…
Non notée
CVE-2021-25089
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore…
Non notée
CVE-2021-24423
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings,…
Non notée