Lucene search
HistoryOct 25, 2022 - 5:15 p.m.
CVE-2022-3393
post to csv
bestwebsoft
wordpress
csv injection
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.8%
The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection
Affected configurations
Node
bestwebsoftpost_to_csvRange≤1.4.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bestwebsoft | post_to_csv | * | cpe:2.3:a:bestwebsoft:post_to_csv:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Design/Logic Flaw
2022-10-25 17:15:00
wpvulndb
wpvulndb
Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
2022-10-03 00:00:00
wpexploit
wpexploit
Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
2022-10-03 00:00:00
cve
cve
CVE-2022-3393
2022-10-25 17:15:57
cvelist
cvelist
CVE-2022-3393 Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
2022-10-25 00:00:00
patchstack
patchstack
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.8%
Related for NVD:CVE-2022-3393