← back
CVE-2022-0531

WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting

EPSS 0.8%CWE-79
The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →