TI-2013-04063 CVE-2013-4626 · GHSA-g9w2-v7fc-g9xpCross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for…Priority LOW 24Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02058 · Published 2013-09-26 · No fix listed CWE-79