CVE-2022-1800

CVE-2022-1800 affects the WordPress plugin “Export any WordPress data to XML/CSV” versions prior to 1.3.5. The root cause is unsanitized use of the POST parameter cpt in a database query during export, which leads to SQL injection. Multiple sources (Red Hat, CNVD, CVE/NVD listings, WPVulnDB, Patc...

CVE-2022-1800: Improper Neutralization of Special Elements used in an SQL Command

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability...

CVE-2022-1202: Improper Neutralization of Formula Elements in a CSV File

The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability...

WordPress plugin: Exporting any WordPress data to XML/CSV – SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

PT-2022-14123 · WordPress · Export Any Wordpress Data To Xml/Csv

Name of the Vulnerable Software and Affected Versions: Export any WordPress data to XML/CSV WordPress plugin versions prior to 1.3.5 Description: The issue arises from the lack of sanitization of the cpt POST parameter when exporting post data, which is then used in a database query. This leads t...

PT-2022-13709

Name of the Vulnerable Software and Affected Versions WP-CRM WordPress plugin versions 1.2.1 and earlier Description The issue arises from the lack of validation and sanitization of fields when exporting people to a CSV file, leading to a CSV injection vulnerability. This allows for potential...

WordPress plugin WP-CRM has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP-CRM plugin version 1.2.1 and earlier versions are vulnerable to a CSV injection...

How to Activate Access to Microsoft Graph Teams Export APIs

Preliminary Action This article documents how to configure your app registration to access the Microsoft Graph Export API for Teams, which is necessary to enable Veeam Backup for Microsoft 365 6a and newer to protect Teams public channel posts. Once the Teams Protected APIs are accessible and Vee...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

Cross site scripting

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

Multiple sources corroborate that ITOP (iTop) is affected by cross-site scripting (XSS) vulnerabilities in various components and versions. The original CVE-2022-31402 notes an XSS via /itop/webservices/export-v2.php in ITOP 3.0.1. Connected PTSecurity entries expand on additional XSS issues: (1)...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

ITOP Cross-Site Scripting Vulnerabilities

ITOP is a platform that provides all the resources needed to optimize iTop. A cross-site scripting vulnerability exists in ITOP version 3.0.1, which stems from a lack of checksum filtering of user-supplied and output data on the /itop/webservices/export-v2.php page. An attacker can exploit this...

CVE-2022-31402: Improper Neutralization of Input During Web Page Generation

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

PT-2025-8659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the hyper-v clocksource. The issue arises from the combination of EXPORT SYMBOL and init, which can lead to kernel panic...

PT-2025-8279

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the xfrm4 protocol init function, which was annotated with init and exported using EXPORT SYMBOL. This combination is...

CVE-2022-26867

PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user to inject payloads that might get interpreted as formulas by the corresponding spreadsheet...