CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects WordPress, Java.
CVE
CVE-2022-1255
Severity
MEDIUM
CVSS
4.8
EPSS
0.70%
WordPress Java
Original NVD Description
The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues
Related CVEs
Other vulnerabilities affecting the same vendor(s)