CVE-2020-22275

The CVE describes a CSV injection in WordPress Easy Registration Forms (ER Forms) plugin v2.0.6, where attacker-supplied entries with malicious CSV commands are not sanitized, enabling code execution when an admin exports CSV data. Affected component: ER Forms plugin for WordPress; root cause: in...

PT-2020-15446

Name of the Vulnerable Software and Affected Versions Easy Registration Forms ER Forms Wordpress Plugin version 2.0.6 Description The issue allows an attacker to submit an entry with malicious CSV commands. When the system administrator generates CSV output from the forms information, there is no...

CVE-2020-22275: Improper Neutralization of Formula Elements in a CSV File

Easy Registration Forms ER Forms Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable...