Lucene search

PatchstackVULNRICHMENT:CVE-2022-46803

HistoryNov 07, 2023 - 4:40 p.m.

CVE-2022-46803 WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection

2023-11-0716:40:45

CWE-1236

Patchstack

github.com

wordpress

noptin

plugin

vulnerability

csv injection

neutralization

formula elements

csv file

newsletter simple plugin.

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5.

References

patchstack.com/database/vulnerability/newsletter-optin-box/wordpress-simple-newsletter-plugin-noptin-plugin-1-9-5-unauth-csv-injection-vulnerability?_s_id=cve