CVE-2022-1255

MEDIUM · CVSS 4.8 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-05-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-1255

Severity

MEDIUM

CVSS

4.8

EPSS

0.70%

WordPress Java

Original NVD Description

The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues