CVE-2022-46809

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2022-46809

CVE-2022-46809 affects WordPress ReviewX – Multi-criteria Rating & Reviews for WooCommerce (WPDeveloper). The vulnerable component is ReviewX CSV export functionality (CSV injection) in ReviewX

WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

Software ReviewX Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-46809 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID 546a17e1f49d Credits Mika Required privilege Unauthenticated Published 13 Apri...