Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
Vulnerability Description
The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.
CVSS Information
N/A
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
WordPress VM Backups 跨站请求伪造漏洞
Vulnerability Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress 插件是WordPress开源的一个应用插件。WordPress的插件。 VM Backups WordPress plugin through 1.0 存在安全漏洞，该漏洞源攻击者可利用该漏洞对登录用户做不需要的操作，例如更新插件的选项，导致存储的跨站点脚本问题。
CVSS Information
N/A
Vulnerability Type
N/A