Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-15092
HistoryAug 23, 2019 - 9:15 p.m.

Design/Logic Flaw

2019-08-2321:15:00
PRIOn knowledge base
www.prio-n.com
2

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

The webtoffee “WordPress Users & WooCommerce Customers Import Export” plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.

CPENameOperatorVersion
import_export_wordpress_usersle1.3.1

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%