Vulnerabilities > CVE-2022-3605 - Unspecified vulnerability in WP CSV Exporter Project WP CSV Exporter

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
wp-csv-exporter-project

Summary

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.