high8.0
CVE-2022-3558
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
Impact
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codection | Import And Export Users And Customers | before 1.20.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://plugins.trac.wordpress.org/changeset?new=2798139%40import-users-from-csv-with-meta&old=2785785%40import-users-from-csv-with-meta
- https://wpscan.com/vulnerability/e3d72e04-9cdf-4b7d-953e-876e26abdfc6
- https://plugins.trac.wordpress.org/changeset?new=2798139%40import-users-from-csv-with-meta&old=2785785%40import-users-from-csv-with-meta
- https://wpscan.com/vulnerability/e3d72e04-9cdf-4b7d-953e-876e26abdfc6