cleantalk
Vulnerabilities and Security Researches

BackWPup – WordPress Backup Plugin, CVE-2013-4626

CVE, Research URL

CVE-2013-4626

Published on
Sep 26, 2013
Research Description
Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.
Affected versions
max 3.0.13.
Status
vulnerable