Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the generateNavigation function, which translates the XLSX file into an HTML representation and displays it in the response without proper sanitization for the sheet's title. Remediation There is no fixed...

CVE-2021-24441 Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...

CVE-2021-24441: Improper Neutralization of Formula Elements in a CSV File

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...

PT-2021-15969

Name of the Vulnerable Software and Affected Versions Sign-up Sheets WordPress plugin versions prior to 1.0.14 Description The issue concerns a CSV injection problem due to the lack of sanitization or validation of the Sheet title when generating the CSV for export. Recommendations For versions...