CVE-2022-38061

Authenticated author+ CSV Injection vulnerability in Export Post Info plugin = 1.2.0 at WordPress...

CVE-2022-38061

Authenticated author+ CSV Injection vulnerability in Export Post Info plugin = 1.2.0 at WordPress...

Input validation

Authenticated author+ CSV Injection vulnerability in Export Post Info plugin = 1.2.0 at WordPress...

CVE-2022-38061

CVE-2022-38061 concerns the WordPress plugin Export Post Info (versions ≤ 1.2.0). The vulnerability is an authenticated CSV injection in CSV exports, allowing an author-or-higher user to inject data during export. Reported as authenticated CSV injection with impact to data integrity (per CVSS ref...

CVE-2022-38068

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Apasionados Export Post Info plugin = 1.1.0 at WordPress...

Cross site scripting

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Apasionados Export Post Info plugin = 1.1.0 at WordPress...