CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

PT-2018-18797

Name of the Vulnerable Software and Affected Versions Contact Form 7 to Database Extension plugin version 2.10.32 Description The issue allows remote attackers to inject spreadsheet formulas into CSV files via the contact form. This is achieved through a CSV Injection vulnerability in the...

CVE-2018-9035: Improper Neutralization of Formula Elements in a CSV File

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

CVE-2015-2040

CVE-2015-2040 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin Contact Form DB (CFDB / contact-form-7-to-database-extension) version 2.8.26. The issue allows remote attackers to inject arbitrary script/HTML via the submit_time parameter on the CF7DBPluginSubmissions pa...