CVE-2024-1383

CVE-2024-1383 affects the WPvivid Backup for MainWP WordPress plugin. It is a Reflected XSS via the id parameter in all versions up to 0.9.32 due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts when a user is tricked into clicking a lin...

WordPress WPvivid Backup for MainWP Plugin <= 0.9.32 is vulnerable to Cross Site Scripting (XSS)

Software WPvivid Backup for MainWP Type Plugin Vulnerable versions = 0.9.32 Fixed in 0.9.33 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1383 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 589fe645b5cf Credits...