Vulnerability CVE-2022-3463


Published: 2022-11-07

Description:
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection

Type:

CWE-1236

 References:
https://wpscan.com/vulnerability/e2a59481-db45-4b8e-b17a-447303469364

Copyright 2024, cxsecurity.com

 

Back to Top