CVE Database /
CVE-2023-6624
CVE · Medium
CVE-2023-6624 — Import and export users and customers [import-users-from-csv-with-meta] < 1.24.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6624
|
Import and export users and customers [import-users-from-csv-with-meta] < 1.24.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 1.24.4
|
1.24.4 |
2023-12-11 |
—
|
CVE-2023-6624
A cross-site scripting vulnerability was discovered in the Import and export users and customers plugin before version 1.24.4 that could enable attackers to inject malicious scripts into websites, potentially redirecting users, displaying unwanted advertisements, or executing arbitrary HTML code. The flaw was identified by Rafshanzani Suhada and poses a risk to site visitors who encounter the injected content. Users should upgrade to version 1.24.4 or later to remediate this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings