Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2017-10837

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Backup-guard
Products
Backup Guard
CVE-2021-24155

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE.

CVSS 3.1 · 7.2 High EPSS 83.7% KEV · Not listed
Vendors
Backup-guard
Products
Backup Guard