CVE-2021-24423

Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.6.59

Description The issue allows high privilege users to set malicious JavaScript payload due to a lack of sanitization in the updraft service settings, leading to a Stored Cross-Site Scripting issue.

Recommendations For versions prior to 1.6.59, update to version 1.6.59 or later to resolve the issue. As a temporary workaround, consider restricting access to the updraft service settings to minimize the risk of exploitation.