104 matches found
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
9.8CVSS9.6AI score0.0302EPSS
SaveExploits1References3
Input validation
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
7.5CVSS9.4AI score0.0302EPSS
SaveExploits1References3Affected Software1
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
9.6AI score0.0302EPSS
SaveExploits1References3
CVE-2020-22276
The CVE-2020-22276 affects the WeForms WordPress plugin, version 1.4.7, which is vulnerable to CSV injection via a form entry. The CVSS data in the record shows a high severity (CVSS v3.1 base score 9.8, CRITICAL) with network attack vector, no authentication, and no user interaction required, im...
9.8CVSS9.5AI score0.0302EPSS
SaveExploits1References3Affected Software1
20