CVE-2023-5099

The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute...

WordPress Plugin HTML filter and csv-file search security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-31714 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: HTML filter and csv-file search plugin for WordPress versions up to 2.7 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'csvsearch' shortcode, allowing...