CVE-2024-9662

The CYAN Backup WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.5.3 . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute XSS attacks even when t...

CVE-2024-9663

The CYAN Backup WordPress plugin (versions prior to 2.5.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of certain plugin settings, specifically related to remote storage settings . This allows high-privilege users, such as adm...