Non notée
CVE-2021-24708 The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before…
Description
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Export any WordPress data to XML/CSV 1.3 | premières → < 1.3.1 | 1.3.1 |
Autres CVE de Export any WordPress data to XML/CSV
Les 5 CVE de Export any WordPress data to XML/CSV →
CVE-2023-4724
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
7.2
Élevée
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Non notée
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Non notée
CVE-2022-1800
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when…
Non notée