Description The wp-all-import plugin before 3.4.6 for WordPress has XSS. References https://wordpress.org/plugins/wp-all-import/#developers