CVE-2022-4897

The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2023-02-21

Last modified

2025-03-14

Affected products

• Backupbuddy (Ithemes)
• Backupbuddy (Unknown)

References

• https://wpscan.com/vulnerability/7b0eeafe-b9bc-43b2-8487-a23d3960f73f