All-in-One WP Migration, 4de1b0a0df2a140c0d7934e63a26753252a8fdd8

CVE, Research URL: 4de1b0a0df2a140c0d7934e63a26753252a8fdd8
Home page URL: Security reports for All-in-One WP Migration
Application: All-in-One WP Migration
Published on: Aug 15, 2022
Research Description: All-in-One WP Migration and Backup [all-in-one-wp-migration] < 7.63 All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting The All-in-One WP Migration plugin for WordPress is vulnerable to cross-site scripting via the 'storage' parameter in versions up to, and including, 7.62 due to insufficient input sanitization and output escaping. This allows attackers to execute arbitrary web scripts in victim's browsers. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Affected versions: max 7.63.
Status: vulnerable