Lucene search
WPScanCVELIST:CVE-2022-1202HistoryJun 13, 2022 - 12:41 p.m.
CVE-2022-1202 WP-CRM <= 1.2.1 - CSV Injection
2022-06-1312:41:41
CWE-1236
WPScan
www.cve.org
3
wp-crm
csv injection
cve-2022-1202
wordpress plugin
EPSS
0.001
Percentile
34.8%
The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability.
CNA Affected
[
{
"product": "WP-CRM – Customer Relations Management for WordPress",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "1.2.1",
"status": "affected",
"version": "1.2.1",
"versionType": "custom"
}
]
}
]Related
prion
prion
Input validation
2022-06-13 13:15:00
wpexploit
wpexploit
WP-CRM <= 1.2.1 - CSV Injection
2022-05-18 00:00:00
cve
cve
CVE-2022-1202
2022-06-13 13:15:10
nvd
nvd
CVE-2022-1202
2022-06-13 13:15:10
patchstack
patchstack
WordPress WP-CRM plugin <= 1.2.1 - CSV Injection vulnerability
2022-05-18 00:00:00
wpvulndb
wpvulndb
WP-CRM <= 1.2.1 - CSV Injection
2022-05-18 00:00:00
cnvd
cnvd
WordPress WP-CRM plugin CSV injection vulnerability
2022-06-15 00:00:00