The UpdraftPlus restore page echoed the attacker-supplied updraft_restore parameter into the page without escaping. An unauthenticated attacker who lures an administrator into a crafted request can run script in their browser. Fixed in 1.16.69. This vulnerability affects the following application versions: UpdraftPlus: WordPress Backup &... Weiterlesen: Reflected Cross-Site Scripting in UpdraftPlus Restore Page
Intelligence View
⚡ tsecurity.de Intelligence
Reflected Cross-Site Scripting in UpdraftPlus Restore Page
The UpdraftPlus restore page echoed the attacker-supplied updraft_restore parameter into the page without escaping. An unauthenticated attacker who lures an…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
War diese Seite hilfreich?