high8.6
CVE-2018-16308
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.
Impact
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ninjaforms | Ninja Forms | before 3.3.14.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/148993/WordPress-Ninja-Forms-3.3.13-CSV-Injection.html
- https://wordpress.org/plugins/ninja-forms/#developers
- https://www.exploit-db.com/exploits/45234/
- https://packetstormsecurity.com/files/148993/WordPress-Ninja-Forms-3.3.13-CSV-Injection.html
- https://wordpress.org/plugins/ninja-forms/#developers
- https://www.exploit-db.com/exploits/45234/