2 matches found
CVE-2021-25022
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backuptimestamp and jobid parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues...
6.1CVSS6AI score0.01122EPSS
SaveExploits2References1
CVE-2021-25022: Improper Neutralization of Input During Web Page Generation
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backuptimestamp and jobid parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues...
6.1CVSS5.8AI score0.01122EPSS
SaveExploits2References3
20