WP CSV Exporter < 1.3.7 - CSV Injection

2022-11-2900:00:00

Francesco Carlucci

414

wordpress

csv exporter

security vulnerability

data export

formula injection

EPSS

0.001

Percentile

26.6%

JSON

The plugin does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.

- create a post using =5+5 as the title
- export the data as CSV
- open the CSV with a spreadsheet application (Excel, Libre Office)
- the CSV formula gets executed

EPSS

0.001

Percentile

26.6%

JSON

Related for WPEX-ID:28ECDF61-E478-42C3-87C0-80A9912EADB2