The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.

Published Jul 18, 2019 · Updated Aug 6, 2024 · Assigned by mitre