Lucene search

K
cvelistWPScanCVELIST:CVE-2022-3393
HistoryOct 25, 2022 - 12:00 a.m.

CVE-2022-3393 Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection

2022-10-2500:00:00
CWE-1236
WPScan
www.cve.org
2
cve-2022-3393
post to csv
bestwebsoft
csv injection
wordpress plugin

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

68.8%

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Post to CSV by BestWebSoft",
    "versions": [
      {
        "version": "1.4.0",
        "status": "affected",
        "lessThanOrEqual": "1.4.0",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

68.8%

Related for CVELIST:CVE-2022-3393