CVE-2022-3243 — Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi
The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection e…
Published: 2022-10-17 · CVSS: 7.2 · CVSS 3.1
The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7