← CVE Intelligence

CVE-2021-24144

Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection PUBLISHED

Description (CNA)

Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.

Affected (CNA)

Vendor / productVersions
Unknown / Contact Form 7 Database Addonaffected 1.2.5.6 before 1.2.5.6

CWE

CWE-74

References

ADP enrichment

CVE

No English description supplied.