4 matches found
Input validation
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
7.5CVSS9.4AI score0.0302EPSS
SaveExploits1References3Affected Software1
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
9.8CVSS0.0302EPSS
SaveExploits1References3
CVE-2020-22276: Improper Neutralization of Formula Elements in a CSV File
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
9.8CVSS5.8AI score0.0302EPSS
SaveExploits1References2
PT-2020-15447
Name of the Vulnerable Software and Affected Versions WeForms Wordpress Plugin version 1.4.7 Description The issue allows CSV injection via a form's entry. Recommendations For WeForms Wordpress Plugin version 1.4.7, consider disabling the form entry feature until a patch is available to prevent C...
9.8CVSS0.0302EPSS
SaveExploits1References9
20