[WordPress BackupBuddy Plugin](versions 8.8.3 and older) Vulnerability

Importance (CVSS3.0)

★★★★★★★☆☆☆ 7.1/ 10 - High

Details

A Cross-Site Scripting (XSS) vulnerability was discovered in WordPress BacksupBuddy Plugin.

Because of this vulnerability malicious attackers can inject fraudulent scripts such as redirect, ads, and other HTML payload. This may be executed when guests visit the website.

Solutions

Update the WordPress BackupBuddy Plugin to the newest version (8.8.3 and newer).

Source

CVE-2022-34897

We provide information about critical vulnerabilities of WordPress for people who are using or are considering using Wordpress for their projects.

“[WordPress BackupBuddy Plugin](versions 8.8.3 and older) Vulnerability in Cross-Site Scripting (XSS)”, by WS Security is licensed under CC BY 4.0.