CVE-2022-0360

CVE-2022-0360: WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting

Vendor Unknown

Product Easy Drag And drop All Import : WP Ultimate CSV Importer

Weakness CWE-79 · XSS

Published February 28, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues

Key dates

02Disclosure timeline

February 28, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0360

Related vulnerabilities

04Related CVE

CVE-2025-24687 WordPress Show/Hide Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2022-4695 Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-1410 Stored XSS in Graphite FunctionDescription tooltip CVE-2022-50801 JM-DATA ONU JF511-TV 1.0.67 Authenticated Stored Cross-Site Scripting (XSS) Vulnerability CVE-2023-48533 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)