Lucene search
+L

8 matches found

attackerkb
attackerkb
•added 2022/02/01 1:15 p.m.•13 views

CVE-2021-25089

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2022/02/01 1:15 p.m.•20 views

CVE-2021-25089

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.008EPSS
SaveExploits2References1
Prion
Prion
•added 2022/02/01 1:15 p.m.•37 views

Cross site scripting

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

4.3CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•2 views

PT-2022-9645

Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.16.69 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the updraft restore parameter is not properly sanitised and escaped before being...

6.1CVSS0.008EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/01 12:00 a.m.•3 views

CVE-2021-25089: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/11/29 2:15 p.m.•7 views

CVE-2021-43695

issabelPBX version 2.11 is affected by a Cross Site Scripting XSS vulnerability. In file page.backuprestore.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST without sanitization, then there is a XSS vulnerability...

6.1CVSS6.4AI score0.00574EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/11/29 2:15 p.m.•23 views

CVE-2021-43695

issabelPBX version 2.11 is affected by a Cross Site Scripting XSS vulnerability. In file page.backuprestore.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST without sanitization, then there is a XSS vulnerability...

6.1CVSS6.4AI score0.00574EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•20 views

IssabelPbx 跨站脚本漏洞

IssabelPbx is an open source Gui Graphical User Interface from the Issabel Foundation. It is used to control and manage Asterisk Pbx. Issabel issabelPBX suffers from a cross-site scripting vulnerability that originates in the file page.backuprestore.php, where the exit function will terminate the...

6.1CVSS5.2AI score0.00574EPSS
SaveExploits1References2
Rows per page
Query Builder