Skip to content
OpenAdvisories

Vendor

manishkrag

1 known vulnerabilities.

Products

Members Import 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2022-4663

    Members Import <= 1.4.2 - Self Cross-Site Scripting

    The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible …

    manishkrag Members Import Web / CMS