CVE-2024-9662

The CYAN Backup WordPress plugin (versions prior to 2.5.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient sanitization and escaping of certain settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks even in environments where the un...

CVE-2024-9663

The CYAN Backup WordPress plugin (versions prior to 2.5.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain settings, specifically within the Remote Storage Settings . This flaw allows high-privilege users, such as adminis...