Skip to content
OpenAdvisories
Unscored CVE-2021-24426 EUVD-2021-11338GHSA-mjc2-j72w-9227

Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)

Published Jul 12, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue

Affected products

VendorProductAffectedFixed
— Backup by 10Web – Backup and Restore Plugin 1.0.20 – ≤ 1.0.20 —

References