| Package | Affected versions | Patched versions |
|---|---|---|
| backwpup plugin | = 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9≤ 3.0.12 |
Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free