EUVD-2023-37181

Malicious code in bioql PyPI...

CVE-2022-0864: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraftinterval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting XSS vulnerability...

PT-2022-13483

Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.22.9 Description The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. It occurs because the updraft interval parameter is not properly sanitized and escaped before...

PT-2022-9645

Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.16.69 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the updraft restore parameter is not properly sanitised and escaped before being...

CVE-2021-25089: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

CVE-2021-24423: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraftservice settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue...

PT-2022-9579

Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.16.66 Description The issue is related to Reflected Cross-Site Scripting, where the backup timestamp and job id parameters are not properly sanitized and escaped before being outputted ba...

CVE-2021-25022: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backuptimestamp and jobid parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues...