CVE-2020-22277: Vulnerability Analysis & Exploit Details

Status: Modified - Last modified: 07-11-2023 Published: 04-11-2020

CVE-2020-22277
Vulnerability Scoring

8.0
/10

Attack Complexity Details

  • Attack Complexity: Low Impact
  • Attack Vector: NETWORK
  • Privileges Required: Low Impact
  • Scope: UNCHANGED
  • User Interaction: REQUIRED

CIA Impact Definition

  • Confidentiality: HIGH IMPACT
  • Integrity: HIGH IMPACT
  • Availability: HIGH IMPACT

CVE-2020-22277 Vulnerability Summary

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.

Access Complexity Graph for CVE-2020-22277

Impact Analysis for CVE-2020-22277

CVE-2020-22277: Detailed Information and External References

EPSS

0.01330

EPSS %

0.85922

References

0.01330

CWE

CWE-1236

Vulnerable Configurations

  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.5:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.5:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.6:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.6:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.7:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.7:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.8:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.8:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.8.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.8.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.9:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.0.9:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.1.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.5:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.5:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.6:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.6:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.7:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.7:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.8:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.8:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.9:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.9:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.10:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.10:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.11:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.11:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.12:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.2.12:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.5:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.5:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.6:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.6:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.7:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.7:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.8:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.8:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.9:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.9:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.10:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.14.3.10:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.0.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.0.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.1.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.1.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.2.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.5:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.5:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.6:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.3.6:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.4.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.1:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.1:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.2:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.2:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.3:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.3:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.4:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.4:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.5:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.5:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.6:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.6:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.7:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.7:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.8:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.8:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.9:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.9:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.10:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.10:*:*:*:*:wordpress:*:*
  • cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.11:*:*:*:*:wordpress:*:*
    cpe:2.3:a:codection:import_and_export_users_and_customers:1.15.5.11:*:*:*:*:wordpress:*:*

CVSS3 Source

nvd@nist.gov

CVSS3 Type

Primary

CVSS3 Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Protect Your Infrastructure: Combat Critical CVE Threats

Stay updated with real-time CVE vulnerabilities and take action to secure your systems. Enhance your cybersecurity posture with the latest threat intelligence and mitigation techniques. Develop the skills necessary to defend against CVEs and secure critical infrastructures. Join the top cybersecurity professionals safeguarding today's infrastructures.

Recently Published CVEs