Import CSV or XML Datafeed With Ease, CVE-2022-0360

CVE, Research URL: CVE-2022-0360
Home page URL: Security reports for Import CSV or XML Datafeed With Ease
Application: Import CSV or XML Datafeed With Ease
Published on: Feb 28, 2022
Research Description: The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues
Affected versions: Min -, max 6.4.3.
Status: vulnerable