CVE-2022-4663 Members Import <= 1.4.2 - Self Cross-Site Scripting

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

CVE-2022-4663

CVE-2022-4663 affects the WordPress Members Import plugin (versions

WordPress Members Import Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Members Import Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4663 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID d4d45be3e61f Credits Saeed Alzahrani Required...