Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-22277 Details

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22277.pdf	CVE	ExploitThird Party Advisory
https://mega.nz/file/bSQnlS4R#UY_ozLkvXgXFKzqtTRKeB9RXGi6aEQF3X6eKXdSiBt0	CVE	ExploitThird Party Advisory
https://wordpress.org/plugins/import-users-from-csv-with-meta/#:~:text=Install%20Import%20and%20export%20users%20and%20customers%20automatically%2Cis%20uploaded%20and%20extracted%2C%20click%20Activate%20Plugin%20.	CVE
https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22277.pdf	[email protected]	ExploitThird Party Advisory
https://mega.nz/file/bSQnlS4R#UY_ozLkvXgXFKzqtTRKeB9RXGi6aEQF3X6eKXdSiBt0	[email protected]	ExploitThird Party Advisory
https://wordpress.org/plugins/import-users-from-csv-with-meta/#:~:text=Install%20Import%20and%20export%20users%20and%20customers%20automatically%2Cis%20uploaded%20and%20extracted%2C%20click%20Activate%20Plugin%20.	[email protected]

CWE-ID	CWE Name	Source
CWE-1236	Improper Neutralization of Formula Elements in a CSV File	[email protected]

Product	Versions
codection import and export users and customers	<= 1.15.5.11
CPE cpe:2.3:a:codection:import_and_export_users_and_customers::::::wordpress::* Remediation No remediation found in references.

6 change records found show changes

QUICK INFO