Description
Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.
References
- http://wordpress.org/plugins/backwpup/changelog
- 61904 vdb-entry
- 54515 third-party-advisory
- https://www.htbridge.com/advisory/HTB23161
- 20130821 Cross-Site Scripting (XSS) in BackWPup WordPress Plugin mailing-list