Lucene search

PRIOn knowledge basePRION:CVE-2023-5738

HistoryNov 27, 2023 - 5:15 p.m.

Cross site scripting

2023-11-2717:15:00

PRIOn knowledge base

www.prio-n.com

wordpress

backup & migration

cross-site scripting

users

low role

vulnerability

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.

CPENameOperatorVersion
backup_and_migrationlt1.4.4

CPE	Name	Operator	Version
	backup_and_migration	lt	1.4.4

References

wpscan.com/vulnerability/7f935916-9a1a-40c7-b6d8-efcc46eb8eaf