Exploit for Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection CVE-2022-3600

Name: Exploit for Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection CVE-2022-3600
Rating: 5 (57 reviews)

2022-09-28 | CVSS 1.0

## https://sploitus.com/exploit?id=WPEX-ID:16E2D970-19D0-42D1-8FB1-E7CB14ACE1D0
- Submit an order using =5+5 as "first name" and empty "last name" (the plugin allows that).
- Export the data as CSV from Reports > Export.
- Open the CSV with a spreadsheet application (Excel, Libre Office).
- The CSV formula gets executed.