Unscored CVE-2018-0546 EUVD-2018-1363GHSA-qcq3-8r24-p3mw

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web …

Published Mar 9, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Soflyy	WP All Import	prior to version 3.4.6	—

References

https://plugins.trac.wordpress.org/changeset/1742744/
https://wordpress.org/plugins/wp-all-import/#developers
JVN#33527174 third-party-advisory