Input validation

2022-11-1415:15:00

PRIOn knowledge base

www.prio-n.com

data validation

exported csv

security vulnerability

nvd

wordpress plugin

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.

CPENameOperatorVersion
wpforms_prolt1.7.7

CPE	Name	Operator	Version
	wpforms_pro	lt	1.7.7

References

wpscan.com/vulnerability/0eae5189-81af-4344-9e96-dd1f4e223d41