Input validation vulnerability in Lazyest Backup 0.2.2

The Lazyest Backup plugin for WordPress has a security vulnerability that can be exploited by unauthenticated attackers. This vulnerability affects versions up to 0.2.2 and allows them to inject malicious web scripts into pages. These scripts will execute if the attacker can convince a user to perform an action like clicking a link. This vulnerability is caused by not properly sanitizing input or escaping output in the ‘xml_or_all’ parameter of the lazyest-backup.php file.