Description
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner is prone to two vulnerabilities which can be exploited by malicious people to conduct cross-site scripting attacks. Successful exploitation of this vulnerability requires that "register_globals" is enabled. WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner version 3.0 is vulnerable; other versions may also be affected.
Remediation
Update to plugin version 3.0.1 or latest
References
Related Vulnerabilities
Microsoft SQL Server Other Vulnerability (CVE-2002-1872)
PHP Improper Input Validation Vulnerability (CVE-2016-7417)
PHP Numeric Errors Vulnerability (CVE-2016-4344)
Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9268)