CVE Database /
CVE-2022-3558
CVE · High
CVE-2022-3558 — Import and export users and customers [import-users-from-csv-with-meta] < 1.20.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-3558
|
Import and export users and customers [import-users-from-csv-with-meta] < 1.20.5 |
Improper Neutralization of Formula Elements in a CSV File |
High
8.0
|
< 1.20.5
|
1.20.5 |
2022-10-17 |
—
|
CVE-2022-3558
The Import and export users and customers plugin for WordPress before version 1.20.5 contains a CSV injection vulnerability that allows users with subscriber-level access to insert malicious content into exported CSV files. When an affected CSV file is downloaded and opened in certain local applications with vulnerable configurations, the injected content can execute arbitrary code on the user's system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings