CVE-2020-22277

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

CVE-2020-22277

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

CVE-2020-22277

The CVE-2020-22277 issue affects the WordPress plugin “Import and export users and customers” (versions up to 1.15.5.11; through 1.16.3.5 per Patchstack entry). The root cause is CSV injection via profile data exported by an administrator, caused by insufficient validation/sanitation of user data...