Lucene search
WpvulndbWPVDB-ID:4702DF0C-F60C-4EF5-862B-3E40460AD9E8HistoryJan 03, 2023 - 12:00 a.m.
Members Import <= 1.4.2 - XSS via Imported CSV
2023-01-0300:00:00
wpscan.com
10
xss
csv
admin
vulnerability
0.001 Low
EPSS
Percentile
29.2%
The plugin does not sanitise and escape imported CSV, which could allow attackers to perform Cross-Site Scripting attacks if they can make an admin import a malicious CSV file
| CPE | Name | Operator | Version |
|---|---|---|---|
| members-import | eq | * |
Related
cve
cve
CVE-2022-4663
2023-01-03 14:15:10
prion
prion
Cross site scripting
2023-01-03 14:15:00
nvd
nvd
CVE-2022-4663
2023-01-03 14:15:10
cvelist
cvelist
CVE-2022-4663
2023-01-03 13:56:11