Lucene search

PatchstackVULNRICHMENT:CVE-2023-36527

HistoryNov 07, 2023 - 4:04 p.m.

CVE-2023-36527 WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection

2023-11-0716:04:27

CWE-1236

Patchstack

github.com

wordpress

bestwebsoft

plugin

csv injection

vulnerability

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0.

References

patchstack.com/database/vulnerability/post-to-csv/wordpress-post-to-csv-by-bestwebsoft-plugin-1-4-0-csv-injection?_s_id=cve