Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B69EA1BC-3C9B-47D7-A164-C860EE46A9AF
HistoryMar 13, 2021 - 12:00 a.m.

VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

2021-03-1300:00:00
wpscan.com
4

The plugin does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin’s options, leading to a Stored Cross-Site Scripting issue.

PoC

The PoC will be displayed once the issue has been remediated

CPENameOperatorVersion
vm-backupseq*
Related for WPVDB-ID:B69EA1BC-3C9B-47D7-A164-C860EE46A9AF