The UpdraftPlus WordPress Backup Plugin WordPress plugin...
Moderate severity
Unreviewed
Published
Apr 5, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Apr 4, 2022
Published to the GitHub Advisory Database
Apr 5, 2022
Last updated
Jan 27, 2023
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.
References