WordPress Plugin Vulnerabilities

Keep Backup Daily < 2.0.3 - Reflected Cross-Site Scripting

Description

The plugin does not escape and sanitise the t parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting

Affects Plugins

Plugin icon
keep-backup-daily
Fixed in 2.0.3

References

CVE
CVE-2022-1820

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Eduardo Estevao de Oliveira Azevedo
Verified
Yes
WPVDB ID
38414ba0-6303-4685-baf2-108527c0dcdf

Timeline

Publicly Published
2022-05-23 (about 3 years ago)
Added
2022-05-23 (about 3 years ago)
Last Updated
2023-02-19 (about 3 years ago)

Other

Published
Title
Published
2025-02-12
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.22 - Reflected Cross-Site Scripting
Published
2025-09-23
Title
Simple SEO < 2.0.32 - Contributor+ Stored XSS
Published
2025-04-11
Title
Royal Elementor Addons and Templates < 1.7.1013 - Contributor+ Stored XSS
Published
2024-06-22
Title
OpenPGP Form Encryption for WordPress < 1.5.1 - Contributor+ Stored XSS
Published
2025-03-12
Title
Video Share VOD < 2.7.10 - Reflected Cross-Site Scripting