Stored XSS in WPvivid Backup for MainWP Plugin

Executive Summary

The WPvivid Backup for MainWP plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 0.9.33. This vulnerability arises because the plugin does not properly sanitize input or escape output in the admin settings.

Authenticated users with administrator-level permissions or higher can exploit this flaw to inject malicious web scripts into pages. These scripts will execute whenever any user accesses the affected pages.

This vulnerability specifically affects multi-site WordPress installations and installations where the unfiltered_html capability has been disabled.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update the WPvivid Backup for MainWP plugin to a version later than 0.9.33 where the issue is fixed.

Additionally, ensure that multi-site installations and sites where unfiltered_html is disabled are carefully monitored, as these are the affected environments.

Limit administrator-level permissions to trusted users only, since exploitation requires authenticated users with such permissions.

Useful 0 Not Useful 0

Impact Analysis

An attacker with administrator-level access can inject malicious scripts that execute in the context of other users visiting the affected pages. This can lead to unauthorized actions, data theft, or session hijacking.

Because the vulnerability is a Stored Cross-Site Scripting issue, the malicious code persists on the server and affects all users who access the compromised pages.

The impact is limited by the requirement for high privileges (administrator or above) and the conditions of multi-site installations or disabled unfiltered_html, but it still poses a significant risk to site integrity and user security.

Useful 0 Not Useful 0