22 matches found
EUVD-2023-30327
Malicious code in bioql PyPI...
CVE-2023-26530
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
CVE-2025-23427: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...
CVE-2023-26530
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
CVE-2023-26530
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
CVE-2023-26530 WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
CVE-2023-26530 WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
CVE-2023-26530
CVE-2023-26530 affecting WordPress Updraft plugin ( 0.6.1 is recommended where available; however, no fixed version is documented in the provided material. Remediation status in public feeds remains Unpatched. Monitor for official fixes and apply updates when released.
CVE-2023-26530: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paul Kehrer Updraft plugin = 0.6.1 versions...
PT-2023-20706 · Paul Kehrer · Updraft
Name of the Vulnerable Software and Affected Versions: Paul Kehrer Updraft plugin versions = 0.6.1 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal use...
WordPress plugin Updraft 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
WordPress Updraft 0.6.1 Backup Disclosure
==================================================================================================================================== | Title : WordPress - updraft 0.6.1 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Updraft Type Plugin Vulnerable versions = 0.6.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26530 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bc1184571b44 Credits Nguyen Xuan Hoa Required...
CVE-2022-0864
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraftinterval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting XSS vulnerability...
CVE-2022-0864
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraftinterval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting XSS vulnerability...
PT-2022-13483
Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.22.9 Description The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. It occurs because the updraft interval parameter is not properly sanitized and escaped before...
CVE-2021-25089
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...
PT-2022-9645
Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.16.69 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the updraft restore parameter is not properly sanitised and escaped before being...
PT-2022-9440
Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.6.59 Description The issue allows high privilege users to set malicious JavaScript payload due to a lack of sanitization in the updraft service settings, leading to a Stored Cross-Site...