CVE-2020-9466

CVE-2020-9466 affects the WordPress plugin Export Users to CSV (≤1.4.2). An attacker who can register as a subscriber can inject CSV payloads into user-details fields; when an authenticated admin exports user data to CSV and opens it, the payload can execute (e.g., redirections to malicious sites...

CVE-2020-9466: Improper Neutralization of Formula Elements in a CSV File

The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection...

PT-2020-20679

Name of the Vulnerable Software and Affected Versions Export Users to CSV plugin versions prior to 1.4.3 Description The issue allows CSV Injection. Recommendations For Export Users to CSV plugin versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue...

LiteCart CSV Injection Vulnerability

LiteCart is a lightweight e-commerce platform for online merchants developed using PHP, HTML 5 and CSS 3. A CSV injection vulnerability exists in LiteCart 2.2.1 and earlier versions. An attacker can exploit the vulnerability to execute code via a customer's profile...

Export Users to CSV <= 1.4.2 - CSV Injection

An attacker can register themselves as a subscriber in a WordPress website and provide malicious payloads formula into the user account details field. When an authenticated admin uses the Export Users to CSV plugin to export the details of all the users into a CSV file and open it, the payload ge...

WordPress Export Users to CSV plugin <= 1.4.2 - CSV Injection vulnerability

CSV Injection vulnerability found by Jinson Varghese Behanan in WordPress Export Users to CSV plugin versions = 1.4.2. Solution 2020 Feb. 26 - no patched version available...

Export Users to CSV <= 1.4.2 - CSV Injection

An attacker can register themselves as a subscriber in a WordPress website and provide malicious payloads formula into the user account details field. When an authenticated admin uses the Export Users to CSV plugin to export the details of all the users into a CSV file and open it, the payload ge...

CVE-2020-9017

LiteCart through 2.2.1 allows CSV injection via a customer's profile...

CVE-2020-9017

LiteCart through 2.2.1 allows CSV injection via a customer's profile...

Design/Logic Flaw

LiteCart through 2.2.1 allows CSV injection via a customer's profile...

CVE-2020-9017

LiteCart through 2.2.1 allows CSV injection via a customer's profile...

CVE-2020-9017

LiteCart 2.2.1 and earlier versions are affected by a CSV injection vulnerability in the customer profile handling. The issue, described across multiple sources (CVE-2020-9017 and associated records), enables CSV injection when processing profile data. Public references confirm LiteCart up to ver...

PT-2020-20432

Name of the Vulnerable Software and Affected Versions LiteCart versions prior to 2.2.2 Description The issue allows CSV injection via a customer's profile. This can be exploited by injecting malicious data into CSV files, potentially leading to security breaches. Recommendations For versions prio...

CVE-2020-9017: Improper Neutralization of Formula Elements in a CSV File

LiteCart through 2.2.1 allows CSV injection via a customer's profile...

CVE-2020-8518

Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution...

WordPress Events Manager plugin <= 5.9.7.1 - CSV Injection vulnerability

CSV Injection vulnerability found by Vishnupriya Ilango in WordPress Events Manager plugin versions = 5.9.7.1. Solution Update the WordPress Events Manager plugin to the latest available version at least 5.9.7.2...

WordPress Events Manager Pro plugin <= 2.6.7.1 - CSV Injection vulnerability

CSV Injection vulnerability found by Vishnupriya Ilango in WordPress Events Manager Pro plugin versions = 2.6.7.1. Solution Update the WordPress Events Manager Pro plugin to the latest available version at least 2.6.7.2...

Events Manager Pro < 2.6.7.2 - CSV Injection

The events-manager-pro WordPress plugin was affected by a CSV Injection security vulnerability...

Events Manager < 5.9.7.2 - CSV Injection

The Events Manager WordPress plugin was affected by a CSV Injection security vulnerability...

Elasticsearch Kibana CSV Injection Vulnerability

Elasticsearch Kibana is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands. A CSV injection vulnerability exists in Elasticsearch Kibana. An attacker can exploit the vulnerability to run malicious commands on a logged-in user's...