Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xc3c-6399-cmgj

Опубликовано: 01 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues

The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues

EPSS

Процентиль: 43%
0.00206
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
почти 4 года назад

The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues

EPSS

Процентиль: 43%
0.00206
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79