CVE-2016-10762

2019-07-1812:15:11

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.

CPENameOperatorVersion
camptixeq1.3
camptixeq1.0
camptixeq1.1
camptixeq1.4.2
camptixeq1.2.1
camptixeq1.3.1
camptixeq1.3b
camptixeq1.2

Name	Operator	Version
camptix	eq	1.3
camptix	eq	1.0
camptix	eq	1.1
camptix	eq	1.4.2
camptix	eq	1.2.1
camptix	eq	1.3.1
camptix	eq	1.3b
camptix	eq	1.2

References

hackerone.com/reports/151516

wordpress.org/plugins/camptix/#developers