CVE-2022-3393
The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection
- Affected products
- Post To Csv
- Bestwebsoft Post To Csv
- ≤ 1.4.0
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 1.3% (67th percentile)
- Weakness
- CWE-1236
- NVD status
- Modified
- Published
- 2022-10-25
CVE-2022-3393 at NVD
1 known exploit for CVE-2022-3393
Proof-of-concept code and exploit modules indexed by Sploitus