Description
The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP-CRM – Customer Relations Management for WordPress | 1.2.1 – ≤ 1.2.1 | — |