WordPress UpdraftPlus plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress plugin UpdraftPlus prior to 1.6.59, which stems from the fact that the WordPress plugin does not clean up its updraft_service settings, allowing a highly privileged user to set malicious JavaScript load. An attacker could exploit this vulnerability to execute JavaScript code on the client side.