Skip to content
OpenAdvisories
Unscored CVE-2021-24441 EUVD-2021-11353GHSA-c5xg-pgx2-gmrf

Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

Published Jul 12, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue

Affected products

VendorProductAffectedFixed
— Sign-up Sheets 1.0.14 – < 1.0.14 1.0.14

References