Input validation vulnerability in Migration, Backup, Staging – WPvivid 0.9.90

The WPvivid plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting (XSS). This means that an attacker with administrative privileges can inject malicious code into pages that will execute whenever someone visits them. This vulnerability affects versions of the plugin up to and including 0.9.90 because of a lack of input filtering and output escaping on the ‘path’ setting.