Vulnerability CVE-2022-4897


Published: 2023-02-21

Description:
The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://wpscan.com/vulnerability/7b0eeafe-b9bc-43b2-8487-a23d3960f73f

Copyright 2026, cxsecurity.com

 

Back to Top