Description
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP CSV Exporter | < 1.3.7 | 1.3.7 |
References
- https://wpscan.com/vulnerability/28ecdf61-e478-42c3-87c0-80a9912eadb2 exploit vdb-entry technical-description