Import and export users and customers < 1.16.3.6 - CSV Injection
Description
The plugin did not validate or sanitise user data, such as first and last names from the profile, leading to a CSV injection when the data is exported by an administrator.
Affects Plugins
Fixed in version 1.16.3.6✓
Classification
Miscellaneous
Original Researcher
Mohamad Pishdar (cert.ikiu.ac.ir)
Verified
Yes
Timeline
Publicly Published
2020-11-20 (about 8 months ago)
Added
2020-11-20 (about 8 months ago)
Last Updated
2020-11-21 (about 8 months ago)