Import And Export Users And Customers@* Security Vulnerabilities and Issues — Import And Export Users And Customers@* CVE List

CodectionImport And Export Users And Customers*

3 matches found

CVE•added 2022/05/02 4:5 p.m.•77 views

CVE-2022-1255

CVE-2022-1255 affects the WordPress Import and export users and customers plugin before 1.19.2.1. The issue arises from insufficient sanitization/escaping of imported CSV data, enabling high-privilege users to inject malicious JavaScript and trigger Stored Cross-Site Scripting. The vulnerability ...

4.8CVSS4.8AI score0.00689EPSS

Web

CVE•added 2024/06/08 4:19 p.m.•72 views

CVE-2024-22151

CVE-2024-22151 affects WordPress plugin Import and export users and customers (Codection) up to version 1.24.6, due to Missing Authorization via the fire_cron REST endpoint. Unauthenticated access could trigger plugin cron functionality; CVSS 3.1 base score listed as 5.3 (Medium). Connected sourc...

5.3CVSS5.3AI score0.00317EPSS

CVE•added 2022/11/07 12:0 a.m.•61 views

CVE-2022-3558

CVE-2022-3558 affects the WordPress plugin Import and export users and customers, prior to version 1.20.5. The vulnerability arises from improper escaping of data when exporting to CSV, which enables CSV injection. The issue is demonstrated by a PoC showing crafted data (e.g., nickname payload) e...

8CVSS7.9AI score0.0099EPSS

Web