CVE-2021-24322: Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)
The Database Backup for WordPress plugin before 2.4 did not escape the backuprecipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24322?
CVE-2021-24322 is classified as a medium severity vulnerability due to its potential for exploiting stored cross-site scripting (XSS).
How do I fix CVE-2021-24322?
To fix CVE-2021-24322, update the Database Backup for WordPress plugin to version 2.4 or later.
What type of vulnerability is CVE-2021-24322?
CVE-2021-24322 is a Stored Cross-Site Scripting (XSS) vulnerability affecting versions before 2.4 of the Database Backup for WordPress plugin.
Who is affected by CVE-2021-24322?
Users of the Database Backup for WordPress plugin prior to version 2.4 are vulnerable to CVE-2021-24322.
What is the impact of CVE-2021-24322?
The impact of CVE-2021-24322 allows an attacker to inject malicious scripts into the web application through the backup_recipient parameter.