CVE-2022-3558
Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
HIGH 8.0EPSS 1.1%
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
- Affected
- Import and export users and customers
- CVSS v3.1 NVD
- 8.0 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS
- 1.11% chance of exploitation in the next 30 days, 65th percentile
- Published
- 2022-11-07
- Updated
- 2025-05-01