Non notée
CVE-2022-1255 The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV…
Description
The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Import and export users and customers 1.19 | premières → < 1.19.2.1 | 1.19.2.1 |
Autres CVE de Import and export users and customers
Les 7 CVE de Import and export users and customers →
CVE-2026-92541
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in…
7.2
Élevée
CVE-2026-92540
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users…
7.2
Élevée
CVE-2026-16542
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before…
4.1
Moyenne
CVE-2025-15673
The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads…
4.9
Moyenne