Description
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms | 4.3.13 – < 4.3.13 | 4.3.13 |