CVE-2021-36884

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered in WordPress Backup Migration plugin = 1.1.5 versions...

CVE-2021-36884 WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered in WordPress Backup Migration plugin = 1.1.5 versions...

CVE-2021-36884

The CVE-2021-36884 entry concerns the WordPress Backup Migration plugin for WordPress, affected in versions up to 1.1.5. Affected component is the plugin’s settings handling, where insufficient sanitisation/escaping allows an authenticated user to perform a persistent XSS attack (stored in the co...