CVE-2021-24322: Deliciousbrains Database Backup

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.

Affected products

• Deliciousbrains Database Backup: before 2.4 (fixed in 2.4)

Published 2021-06-01. Last modified 2026-06-17.