Unscored CVE-2018-0547 EUVD-2018-1364GHSA-4xq8-vc5r-w3wf

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web …

Published Mar 9, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Soflyy	WP All Import	prior to version 3.4.7	—

References

https://wordpress.org/plugins/wp-all-import/#developers
JVN#60032768 third-party-advisory
https://plugins.trac.wordpress.org/changeset/1827741/