CVE-2019-20891

WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery CSRF issue with resultant stored cross-site scripting XSS via includes/admin/importers/class-wc-product-csv-importer-controller.php...

CVE-2019-20891: Cross-Site Request Forgery (CSRF)

WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery CSRF issue with resultant stored cross-site scripting XSS via includes/admin/importers/class-wc-product-csv-importer-controller.php...

PT-2020-10856

Name of the Vulnerable Software and Affected Versions WooCommerce versions prior to 3.6.5 Description The issue arises when WooCommerce handles CSV imports of products, leading to a cross-site request forgery CSRF problem that results in stored cross-site scripting XSS. This occurs via the...