CVE-2023-36527 — WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection

CVE-2023-36527

WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection PUBLISHED

Description (CNA)

Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0.

Affected (CNA)

Vendor / product	Versions
BestWebSoft / Post to CSV by BestWebSoft	affected n/a through 1.4.0

CWE

CWE-1236

References

https://patchstack.com/database/vulnerability/post-to-csv/wordpress-post-to-csv-by-bestwebsoft-plugin-1-4-0-csv-injection?_s_id=cve

ADP enrichment

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/post-to-csv/wordpress-post-to-csv-by-bestwebsoft-plugin-1-4-0-csv-injection?_s_id=cve

CISA-ADP

No English description supplied.

No references supplied.