CVE-2021-24994

MEDIUM

WPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-24994 has a selected CVSS score of 6.1 (medium); EIP currently links 1 curated repository PoC.

Description

The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
1

Affected products and versions

1
ProductSourceVersion range

Migration, Backup, Staging – WPvivid Backup and Migration Plugin

CVE List0.9.69 to < 0.9.69affected

Proofs of concept

1

Curated repository PoCs

GitHubCVE-2021-24994Curated repository PoCby yubsy112Not analyzed1 file

Python · 1021 B

GitHub
PoC details

References

2