Skip to content
OpenAdvisories
Low · 3.0 CVE-2022-45350 EUVD-2022-48247GHSA-g5gr-7qpp-2p9m

WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Pär Thernström Product: Simple History – user activity log, audit tool

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1.

Affected products

VendorProductAffectedFixed
Pär Thernström Simple History – user activity log, audit tool ≤ 3.3.1 —

References