Input validation vulnerability in Import and export users and customers 1.24.3

The Import and Export Users and Customers plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack happens when malicious code is stored on an internet page and is executed when a user visits the page. The vulnerability in this plugin exists in all versions up to 1.24.3 and is caused by insufficient input checks and output security measures on user-supplied data. This makes it possible for attackers who have contributor-level or higher permissions to inject malicious scripts into pages, which will execute whenever someone visits the page.