Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•10 views

CVE-2021-24994: Improper Neutralization of Input During Web Page Generation

The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue...

6.1CVSS6.5AI score0.01232EPSS
SaveExploits1References2
Rows per page
Query Builder