WordPress Plugin Vulnerabilities

CSV Import 1.0 - Reflected Cross-Site Scripting (XSS)

Description

The CSV Import WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
csv-import
Fixed in 1.1

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
782b607e-680c-4636-acc6-4a54a3f68a5c

Timeline

Publicly Published
2016-02-23 (about 10 years ago)
Added
2016-02-23 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2024-11-22
Title
Slotti Ajanvaraus < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-04-16
Title
Author WIP Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-07-07
Title
AI Engine < 2.8.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Published
2023-05-10
Title
Custom Field Suite < 2.6.3 - Admin+ Stored XSS
Published
2026-01-06
Title
Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']