CVE-2022-46801 — WordPress Site Reviews Plugin <= 6.2.0 is vulnerable to CSV Injection

CVE-2022-46801

WordPress Site Reviews Plugin <= 6.2.0 is vulnerable to CSV Injection PUBLISHED

Description (CNA)

Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0.

Affected (CNA)

Vendor / product	Versions
Paul Ryley / Site Reviews	affected n/a through 6.2.0

CWE

CWE-1236

References

https://patchstack.com/database/vulnerability/site-reviews/wordpress-site-reviews-plugin-6-2-0-unauth-csv-injection-vulnerability?_s_id=cve

ADP enrichment

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/site-reviews/wordpress-site-reviews-plugin-6-2-0-unauth-csv-injection-vulnerability?_s_id=cve

CISA-ADP

No English description supplied.

No references supplied.