TI-2022-01418 CVE-2022-1546 · GHSA-mrqx-7xmf-24f9WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site ScriptingPriority LOW 29The WooCommerce - Product Importer WordPress plugin through 1.5.2 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site ScriptingCVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00788 · Published 2022-07-11 · No fix listed CWE-79