CVE-2021-25035 Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting

2022-01-2408:01:15

CWE-79

WPScan

www.cve.org

cve-2021-25035

wp time capsule

xss

reflected cross-site scripting

wordpress plugin

EPSS

0.001

Percentile

31.7%

JSON

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

CNA Affected

[
  {
    "product": "Backup and Staging by WP Time Capsule",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.22.7",
        "status": "affected",
        "version": "1.22.7",
        "versionType": "custom"
      }
    ]
  }
]