Threats tagged 'ghsa-fmjc-6x9q-54mf'

The Simple User Import Export plugin for WordPress contains a CSV Injection vulnerability in all versions up to and including 1.1.7. Authenticated users with Administrator-level privileges or higher can exploit this flaw via the import/export users function to embed malicious input into exported CSV files. When these files are opened on a local system with vulnerable configurations, this can lead to code execution.