CVE-2022-0360

PoC —

CVSS 3.1

4.8 medium

EPSS

<1%p49

Published

Feb 28, 2022 (Feb 28, 2022)

Modified

Jun 17, 2026

Description

The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues

Vendors: smackcoders
Products: import all pages\, post types\, products\, orders\, and users as xml \& csv
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.