Lucene search
Francesco CarlucciWPEX-ID:16E2D970-19D0-42D1-8FB1-E7CB14ACE1D0HistorySep 28, 2022 - 12:00 a.m.
Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
2022-09-2800:00:00
Francesco Carlucci
72
easy digital downloads
unauthenticated
csv injection
order submission
export
spreadsheet application
excel
libre office
formula execution
EPSS
0.003
Percentile
68.8%
The plugin does not validate data when its output in a CSV file, which could lead to CSV injection.
- Submit an order using =5+5 as "first name" and empty "last name" (the plugin allows that).
- Export the data as CSV from Reports > Export.
- Open the CSV with a spreadsheet application (Excel, Libre Office).
- The CSV formula gets executed.
Related
wpvulndb
wpvulndb
Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
2022-09-28 00:00:00
prion
prion
Design/Logic Flaw
2022-11-21 11:15:00
patchstack
patchstack
cvelist
cvelist
cnvd
cnvd
WordPress Easy Digital Downloads plugin CSV injection vulnerability
2022-11-23 00:00:00
nvd
nvd
CVE-2022-3600
2022-11-21 11:15:20
cve
cve
CVE-2022-3600
2022-11-21 11:15:20