CVE-2022-3558

CVE-2022-3558: Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

Vendor Unknown
Product Import and export users and customers
Weakness CWE-1236
Published November 7, 2022
Last update May 1, 2025

CVSS base score

What the vulnerability does

01Description

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.

Key dates

02Disclosure timeline

November 7, 2022 CVE published
May 1, 2025 Record updated