Lucene search
Adel BouarichaWPEX-ID:E3D72E04-9CDF-4B7D-953E-876E26ABDFC6HistoryOct 17, 2022 - 12:00 a.m.
Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
2022-10-1700:00:00
Adel Bouaricha
57
0.001 Low
EPSS
Percentile
44.6%
The plugin does not properly escape data when exporting it via CSV files.
1) Edit your subscriber account's nickname to: ;=1+3
2) As an administrator, export your users data via http://vulnerable-site.tld/wp-admin/tools.php?page=acui&tab=export, and open the resulting CSV file in Excel or equivalent software.
Related
cve
cve
CVE-2022-3558
2022-11-07 10:15:12
cvelist
cvelist
nvd
nvd
CVE-2022-3558
2022-11-07 10:15:12
prion
prion
Code injection
2022-11-07 10:15:00
wpvulndb
wpvulndb
Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
2022-10-17 00:00:00