Critical · 9.8 CVE-2022-3393 EUVD-2022-42770GHSA-wp9x-2qx4-mfcg

Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection

Published Oct 25, 2022 · Updated May 7, 2025 · Assigned by WPScan

Description

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection

Vendor	Product	Affected	Fixed
—	Post to CSV by BestWebSoft	1.4.0 – ≤ 1.4.0	—