Reflected Cross-Site Scripting Vulnerability in WPvivid Backup Plugin for WordPress

CVE-2024-1383

What is CVE-2024-1383?

The WPvivid Backup for MainWP plugin for WordPress suffers from a reflected cross-site scripting issue due to inadequate input sanitization and output escaping. This vulnerability affects all versions up to and including 0.9.32. It allows unauthenticated attackers to inject arbitrary web scripts through the 'id' parameter, which can be executed on user pages if they are tricked into interacting with a malicious link. Proper measures should be implemented to avoid such security threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References