CVE-2019-20891

HIGH · CVSS 8.8 EPSS 0.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-06-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-20891

Severity

HIGH

CVSS

8.8

EPSS

0.53%

Original NVD Description

WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross-site scripting (XSS) via includes/admin/importers/class-wc-product-csv-importer-controller.php.