Vulnerabilities > CVE-2020-9466 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Export Users to CSV Project Export Users to CSV

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
export-users-to-csv-project
CWE-1236
NVD
Published: 2020-02-28
Updated: 2021-07-21

Summary

The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection.

Vulnerable Configurations

Part Description Count
Application
Export_Users_To_Csv_Project
7

Common Weakness Enumeration (CWE)

References