1 matches found
CVE-2021-24994: Improper Neutralization of Input During Web Page Generation
The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue...
6.1CVSS6.5AI score0.01232EPSS
SaveExploits1References2
20