CVE-2021-24426 Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)

The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24426

The CVE-2021-24426 issue affects the WordPress plugin Backup by 10Web – Backup and Restore (versions up to 1.0.20). The underlying flaw is failure to sanitize/escape the tab parameter before echoing it in the page, which enables a reflected Cross-Site Scripting (XSS) vulnerability. Several connec...