Vulnerabilities and Security Researches

Contact Form 7 Database Addon – CFDB7, CVE-2022-3634

CVE, Research URL: CVE-2022-3634
Home page URL: Security reports for Contact Form 7 Database Addon – CFDB7
Application: Contact Form 7 Database Addon – CFDB7
Published on: Nov 21, 2022
Research Description: The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection
Affected versions: max 1.2.5.4.
Status: vulnerable