WordPress.org
Get WordPress

Plugin Directory

Changeset 2763332


Ignore:
Timestamp:
07/29/2022 09:18:42 AM (4 years ago)
Author:
visser
Message:
  • Fixed: XSS vulnerability when previewing import files (thanks for reporting)
Location:
woocommerce-product-importer/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • woocommerce-product-importer/trunk/product-importer.php

    r2733159 r2763332  
    44 * Plugin URI: https://visser.com.au/woocommerce/plugins/product-importer/
    55 * Description: Import Products, Categories, Tags and product images into your WooCommerce store from simple formatted files (e.g. CSV, TSV, TXT, etc.).
    6  * Version: 1.5.2
     6 * Version: 1.5.4
    77 * Author: Visser Labs
    88 * Author URI: https://visser.com.au/about/

  • woocommerce-product-importer/trunk/readme.txt

    r2733159 r2763332  
    55Tags: woocommerce import, woocommerce product import, woocommerce import products, woocommerce import categories, import woocommerce products, product import, csv, excel
    66Requires at least: 2.9.2
    7 Tested up to: 6.0
    8 Stable tag: 1.5.3
     7Tested up to: 6.0.1
     8Stable tag: 1.5.4
    99License: GPLv2 or later
    1010
    … …  
    141141== Changelog ==
    142142
     143= 1.5.4 =
     144* Fixed: XSS vulnerability when previewing import files (thanks for reporting)
     145
    143146= 1.5.3 =
    144147* Fixed: Sanitize GET and POST form attributes (thanks for reporting)

  • woocommerce-product-importer/trunk/templates/admin/import_upload.php

    r1091524 r2763332  
    1919                    <th class="vertical-align-middle text-align-right" valign="top">
    2020                        <input type="hidden" name="column[]" value="<?php echo $key+1; ?>" />
    21                         <code><?php echo $cell; ?></code>
     21                        <code><?php echo esc_attr( $cell ); ?></code>
    2222                    </th>
    2323                    <td class="vertical-align-middle text-align-center column-equals"><strong>=</strong></td>
    … …  
    3131                    </td>
    3232                    <td class="vertical-align-middle">
    33                         <code><?php echo woo_pi_format_cell_preview( $second_row[$key], $key, $cell ); ?></code>
     33                        <code><?php echo esc_attr( woo_pi_format_cell_preview( $second_row[$key], $key, $cell ) ); ?></code>
    3434                    </td>
    3535                </tr>
Note: See TracChangeset for help on using the changeset viewer.