Export any WordPress data to XML/CSV, CVE-2021-24708

CVE, Research URL: CVE-2021-24708
Home page URL: Security reports for Export any WordPress data to XML/CSV
Application: Export any WordPress data to XML/CSV
Published on: Nov 08, 2021
Research Description: The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected versions: max 1.3.1.
Status: vulnerable