Filtered by vendor Codection
Subscribe
Filtered by product Import And Export Users And Customers
Subscribe
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-3558 | 1 Codection | 1 Import And Export Users And Customers | 2022-11-09 | N/A | 8.0 HIGH |
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files. | |||||
CVE-2022-1255 | 1 Codection | 1 Import And Export Users And Customers | 2022-05-09 | 3.5 LOW | 4.8 MEDIUM |
The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues | |||||
CVE-2020-22277 | 1 Codection | 1 Import And Export Users And Customers | 2021-07-21 | 6.0 MEDIUM | 8.0 HIGH |
Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile. |