CVE-2018-9035: Improper Neutralization of Formula Elements in a CSV File

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

PT-2018-18797

Name of the Vulnerable Software and Affected Versions Contact Form 7 to Database Extension plugin version 2.10.32 Description The issue allows remote attackers to inject spreadsheet formulas into CSV files via the contact form. This is achieved through a CSV Injection vulnerability in the...