CVE-2022-0864

CVE-2022-0864 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the UpdraftPlus WordPress Backup Plugin versions prior to 1.22.9. This flaw arises from insufficient sanitization of the updraft_interval parameter, allowing malicious scripts to be injected and executed in a user's browser. Rated as Medium severity with a CVSS score of 6.1, the vulnerability requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L). Successful exploitation could lead to information disclosure (C:L) and integrity compromise (I:L), though not denial of service (A:N). While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist for detection. Community discussion and media coverage for this CVE are minimal, which is typical for the vast majority of vulnerabilities.