CVE-2023-5738

Published: 2023-11-27T17:15Z

Last Modified: 2024-11-21T08:42Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt