Share
## https://sploitus.com/exploit?id=WPEX-ID:E2A59481-DB45-4B8E-B17A-447303469364
- As unauthenticated, submit a form using =5+5 as value in any field

- As admin, export the data as CSV (/wp-admin/admin.php?page=fluent_forms&form_id=1&route=entries)
- open the CSV with a spreadsheet application (Excel, Libre Office)
- the CSV formula gets executed