Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24423

UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown UpdraftPlus WordPress Backup Plugin

  • 1.6.59 to < 1.6.59affected

References