Contact Form 7 Database Addon – CFDB7, CVE-2021-24144

CVE, Research URL: CVE-2021-24144
Home page URL: Security reports for Contact Form 7 Database Addon – CFDB7
Application: Contact Form 7 Database Addon – CFDB7
Published on: Mar 18, 2021
Research Description: Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.
Affected versions: max 1.2.5.6.
Status: vulnerable

Contact Form 7 Database Addon &#8211; CFDB7, CVE-2021-24144