NetSight
medium6.1

CVE-2021-25035

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin…

Impact

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffected versions
RevmakxBackup And Staging By Wp Time Capsule
before 1.22.7

Weakness classification

References