← CVE Intelligence

CVE-2022-3463

FluentForm < 4.3.13 - CSV Injection PUBLISHED

Description (CNA)

The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection

Affected (CNA)

Vendor / productVersions
Unknown / Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Formsaffected 4.3.13 before 4.3.13

CWE

CWE-1236

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.