CVE-2022-1546 – WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2022-1546

The WooCommerce - Product Importer WordPress plugin through 1.5.2 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site Scripting El plugin WooCommerce - Product Importer de WordPress versiones hasta 1.5.2, no sanea y escapa de los datos importados antes de devolverlos a la página, conllevando a un ataque de tipo Cross-Site Scripting Reflejado • https://wpscan.com/vulnerability/5ec6182c-6917-4c48-90ce-e0ebe38e7595 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •