Lucene search
PRIOn knowledge basePRION:CVE-2022-1539HistoryJul 25, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-07-2513:15:00
PRIOn knowledge base
www.prio-n.com
6
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| exports_and_reports | lt | 0.9.2 |
Related
patchstack
patchstack
nvd
nvd
CVE-2022-1539
2022-07-25 13:15:08
cve
cve
CVE-2022-1539
2022-07-25 13:15:08
cvelist
cvelist
CVE-2022-1539 Exports and Reports < 0.9.2 - Contributor+ CSV Injection
2022-07-25 12:46:03