Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1202

WP-CRM <= 1.2.1 - CSV Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP-CRM – Customer Relations Management for WordPress

  • 1.2.1 to ≤ 1.2.1affected

References