Lucene search
PRIOn knowledge basePRION:CVE-2023-0721HistoryJun 09, 2023 - 6:15 a.m.
Input validation
2023-06-0906:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
vulnerability
csv injection
metform elementor
contact form builder
unauthenticated
code execution
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3.3.0. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| metform_elementor_contact_form_builder | le | 3.3.0 |
Related
cve
cve
CVE-2023-0721
2023-06-09 06:15:53
wpvulndb
wpvulndb
Metform Elementor Contact Form Builder < Unauthenticated CSV Injection
2023-06-08 00:00:00
cvelist
cvelist
CVE-2023-0721
2023-06-09 05:33:33
nvd
nvd
CVE-2023-0721
2023-06-09 06:15:53
openvas
openvas
wordfence
wordfence