CVE-2024-1383

CVE-2024-1383 affects the WPvivid Backup for MainWP WordPress plugin. It is a Reflected XSS via the id parameter in all versions up to 0.9.32 due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts when a user is tricked into clicking a lin...

CVE-2024-35664

CVE-2024-35664 affects the WordPress plugin WPvivid Backup for MainWP up to version 0.9.32, with a Reflected XSS due to improper input neutralization during web page generation. Affected component is the plugin itself; root cause is input handling that allows reflected script execution. Impact is...