Unknown · Csv Importer Improved · CVE-2025-50013
Name of the Vulnerable Software and Affected Versions:
CSV Importer Improved versions 0.6.1 and earlier
Description:
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized access or control.
Recommendations:
For CSV Importer Improved versions 0.6.1 and earlier, update to a version that fixes this issue. As a temporary workaround, consider disabling the import functionality until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the CSV Importer Improved until the issue is resolved.