NetSight
medium6.1

CVE-2017-18593

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.

Impact

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.

Affected products

VendorProductAffected versions
UpdraftplusUpdraftplus
before 1.13.5

Weakness classification

References