Lucene search
WpvulndbWPVDB-ID:401D57E4-85D3-4587-ACE2-569A5D0338C8HistoryNov 20, 2020 - 12:00 a.m.
Import and export users and customers < 1.16.3.6 - CSV Injection
2020-11-2000:00:00
wpscan.com
6
0.008 Low
EPSS
Percentile
81.3%
The plugin did not validate or sanitise user data, such as first and last names from the profile, leading to a CSV injection when the data is exported by an administrator.
| CPE | Name | Operator | Version |
|---|---|---|---|
| import-users-from-csv-with-meta | lt | 1.16.3.6 |
Related
nvd
nvd
CVE-2020-22277
2020-11-04 17:15:13
prion
prion
Design/Logic Flaw
2020-11-04 17:15:00
cvelist
cvelist
CVE-2020-22277
2020-11-04 16:57:01
cve
cve
CVE-2020-22277
2020-11-04 17:15:13
patchstack
patchstack