WordPress Ultimate WooCommerce CSV Importer plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Ultimate WooCommerce CSV Importer plugin version 2.0 and prior versions are vulnerable to a cross-site scripting vulnerability caused by a failure to clean and escape imported data before exporting it back to the page. before exporting it back to the page. An attacker could use this vulnerability to execute a reflected cross-site scripting attack.