CVE-2023-5738 (published 2023-11-27T16:22:04.717Z)
The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.
Affected products: Vendor: Unknown
Product: WordPress Backup & Migration
Versions: 0