CVE-2022-3558 Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

2022-11-0700:00:00

CWE-1236

WPScan

www.cve.org

wordpress

plugin

export

csv injection

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

JSON

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Import and export users and customers",
    "versions": [
      {
        "version": "1.20.5",
        "status": "affected",
        "lessThan": "1.20.5",
        "versionType": "custom"
      }
    ]
  }
]