CVE-2022-1089

The CVE-2022-1089 entry concerns the WordPress plugin “Bulk Edit and Create User Profiles” (WP Sheet Editor) versions before 1.5.14. The root cause is a lack of sanitisation/escaping of the Users Login, enabling Stored Cross‑Site Scripting (XSS) by high-privilege users such as admin, even when un...