The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scrip…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00617·Published 2021-11-08·Fixed in 1.3.1CWE-79