CVE-2022-2271

creationtimestamp| type| source ---|---|--- 2022-09-05 16:12:14+00:00| seen| https://t.me/cibsecurity/49288...

CVE-2022-2271

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2271

CVE-2022-2271 concerns the WP Database Backup WordPress plugin datamodel. The provided documents confirm that versions prior to 5.9 fail to escape certain settings, enabling stored cross-site scripting (Stored XSS) by high-privilege users (e.g., admins) when the unfiltered_html capability is disa...

CVE-2022-2271 WP Database Backup < 5.9 - Admin+ Stored Cross-Site Scripting

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...