Bug #16949
Updated by Jim Pingle about 12 hours ago
The Backup package does not validate the @name@ or @path@ values for Backup location entries. It also prints the @name@ and @path@ values without encoding, leading to a potential XSS. Reported by: @lujiefsi