Security Advisory

CVE-2019-15092

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-08-23 20:51:38
Last updated 2024-08-05 00:34:53
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.