The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/ec9292b1-5cbd-4332-bdb6-2351c94f5ac6 | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-07-12 13:15
Updated : 2021-07-15 08:32
NVD link : CVE-2021-24441
Mitre link : CVE-2021-24441
JSON object : View
CWE
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
Products Affected
fetchdesigns
- sign-up_sheets