Database for Contact Form 7, WPforms, Elementor forms, CVE-2022-3604

CVE, Research URL: CVE-2022-3604
Home page URL: Security reports for Database for Contact Form 7, WPforms, Elementor forms
Application: Database for Contact Form 7, WPforms, Elementor forms
Published on: Jan 16, 2024
Research Description: The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.
Affected versions: max 1.2.2.
Status: vulnerable