The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.

Published Aug 28, 2019 · Updated Aug 5, 2024 · Assigned by mitre