← Zuruck zu CVEs
CVE-2022-3574
CRITICAL9.8
Beschreibung
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
CVE Details
CVSS v3.1 Bewertung9.8
SchweregradCRITICAL
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht11/14/2022
Zuletzt geandert4/30/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
wpforms:wpforms_pro
Schwachen (CWE)
CWE-1236
Referenzen
https://wpscan.com/vulnerability/0eae5189-81af-4344-9e96-dd1f4e223d41(contact@wpscan.com)
https://wpscan.com/vulnerability/0eae5189-81af-4344-9e96-dd1f4e223d41(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.