Not rated
CVE-2021-24708 The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before…
Description
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Export any WordPress data to XML/CSV 1.3 | earliest → < 1.3.1 | 1.3.1 |
Other CVEs of Export any WordPress data to XML/CSV
The 5 CVEs of Export any WordPress data to XML/CSV →
CVE-2023-4724
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
7.2
High
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Not rated
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Not rated
CVE-2022-1800
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when…
Not rated