Import and export users and customers, CVE-2022-1255

CVE, Research URL: CVE-2022-1255
Home page URL: Security reports for Import and export users and customers
Application: Import and export users and customers
Published on: May 02, 2022
Research Description: The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues
Affected versions: max 1.9.5.
Status: vulnerable