CVE-2011-5264

The CVE-2011-5264 entry maps to a documented XSS in the WordPress Lazyest Backup plugin, specifically in lazyest-backup.php vulnerable via the xml_or_all parameter. Affected version is prior to 0.2.2. Exploitation would allow remote attackers to inject arbitrary script/HTML in the context of the ...

PT-2013-1479

Name of the Vulnerable Software and Affected Versions Lazyest Backup plugin versions prior to 0.2.2 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the xml or all parameter in the lazyest-backup.ph...

CVE-2011-5264: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lazyest-backup.php in the Lazyest Backup plugin before 0.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xmlorall parameter...