Lucene search
BenachiWPVDB-ID:ADC1D752-331E-44AF-B5DC-B463D56C2CB4HistoryJun 21, 2022 - 12:00 a.m.
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
2022-06-2100:00:00
Benachi
wpscan.com
9
csv files
reflected cross-site scripting
csrf check
EPSS
0.001
Percentile
32.1%
The plugin does not sanitise and escaped imported data before outputting them back in a page, and is lacking CSRF check when performing such action as well, resulting in a Reflected Cross-Site Scripting
PoC
Related
cnvd
cnvd
WordPress Import CSV Files pluginθ·¨η«θζ¬ζΌζ΄
2022-07-19 00:00:00
cvelist
cvelist
CVE-2022-2146 Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
2022-07-17 10:36:27
cve
cve
CVE-2022-2146
2022-07-17 11:15:08
patchstack
patchstack
nvd
nvd
CVE-2022-2146
2022-07-17 11:15:08
wpexploit
wpexploit
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
2022-06-21 00:00:00
prion
prion
Cross site scripting
2022-07-17 11:15:00