Description (CNA)
The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WP-CRM – Customer Relations Management for WordPress | affected 1.2.1 through 1.2.1 |
CWE
CWE-1236
References
ADP enrichment
No English description supplied.