Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder, CVE-2022-3463

CVE, Research URL: CVE-2022-3463
Home page URL: Security reports for Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Application: Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Published on: Nov 07, 2022
Research Description: The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
Affected versions: Min -, max 4.3.13.
Status: vulnerable

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag &amp; Drop WP Form Builder, CVE-2022-3463