cleantalk
Vulnerabilities and Security Researches

WPvivid Backup for MainWP, ec00cf2f6a6757dc3371250c1689bf0e482f89f9

Published on
-
Research Description
WPvivid Backup for MainWP [wpvivid-backup-mainwp] < 0.9.34 WordPress WPvivid Backup for MainWP Plugin <= 0.9.33 is vulnerable to Cross Site Scripting (XSS) Update the WordPress WPvivid Backup for MainWP plugin to the latest available version (at least 0.9.34). Khayal Farzaliyev (shaman0x01) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WPvivid Backup for MainWP Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 0.9.34. Have additional information or questions about this entry? Get in touch.
Affected versions
max 0.9.34.
Status
vulnerable