medium6.1
CVE-2018-16256
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule).
Impact
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule). NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Soflyy | Wp All Import | Version 3.4.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
- https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing
- https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
- https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing