Exploit for Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection CVE-2022-3558

Name: Exploit for Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection CVE-2022-3558
Rating: 5 (51 reviews)

2022-10-17 | CVSS 1.2

## https://sploitus.com/exploit?id=WPEX-ID:E3D72E04-9CDF-4B7D-953E-876E26ABDFC6
1) Edit your subscriber account's nickname to: ;=1+3
2) As an administrator, export your users data via http://vulnerable-site.tld/wp-admin/tools.php?page=acui&tab=export, and open the resulting CSV file in Excel or equivalent software.