CVE-2017-18488

Backup Guard <= 1.1.46 - Cross-Site Scripting

mediumImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
6.1
CVSS Score
6.1
CVSS Score
medium
Severity
1.1.47
Patched in
2356d
Time to patch

Description

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.

CVSS Vector Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Low
Confidentiality
Low
Integrity
None
Availability

Technical Details

Affected versions<1.1.47
PublishedAugust 11, 2017
Last updatedJanuary 22, 2024
Affected pluginbackup

Check if your site is affected.

Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.