Reflected cross-site scripting via the showdata and initiate_restore parameters

Due to insufficient input sanitization and output escaping, it is possible for unauthenticated attackers to inject arbitrary web scripts into pages. These scripts can execute if the attacker successfully tricks an admin user into performing an action, such as clicking a link.

This vulnerability affects the following application versions:

• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.0
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.4
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.5
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.6
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.7
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.8
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.9
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.10
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.11
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.12
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.13
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.14
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.15
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.16
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.17
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.20
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.21
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.22
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.23
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.24
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.25
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.26
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.28
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.29
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.32
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.34
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.35
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.36
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.37
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.40
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.41
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.42
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.43
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.44
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.45
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.46
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.47
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.48
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.49
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.50
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.51
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.53
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.55
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.56
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.59
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.68
• UpdraftPlus: WordPress Backup & Migration Plugin 1.16.69
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.1
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.3
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.4
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.5
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.6
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.7
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.8
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.9
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.10
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.11
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.12
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.14
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.15
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.16
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.17
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.18
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.19
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.20
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.21
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.22
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.23
• UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
• UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11
• UpdraftPlus: WordPress Backup & Migration Plugin 1.24.12