Medium severity4.8NVD Advisory· Published Jan 24, 2022· Updated Jun 17, 2026

CVE-2021-24423

Description

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Updraftplusinferred2 versions
<1.6.59+ 1 more
- (no CPE)range: <1.6.59
- (no CPE)range: <1.6.59
Package: https://wordpress.org/plugins/updraftplus

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/541974d6-2df8-4497-9aee-afd3b9024102nvdExploitThird Party Advisory
m0ze.ru/vulnerability/%5B2021-05-09%5D-%5BWordPress%5D-%5BCWE-79%5D-UpdraftPlus-WordPress-Plugin-v1.16.56.txtnvd

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000