Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-3393

Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Post to CSV by BestWebSoft

  • 1.4.0 to ≤ 1.4.0affected

References