title: WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting
description: The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Migration, Backup, Staging – WPvivid
vendor: Unknown
versions:
lessThan: 0.9.70, status: affected, version: 0.9.70, versionType: custom
}