The Import and export users and customers WordPress plugin prior to 1.20.5 does not properly escape data when exporting it via CSV files.
codection import and export users and customers