critical9.8
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.
Impact
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weformspro | Weforms | Version 1.4.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://uploadboy.com/tvvs4p2gf03m/887/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
- https://filebin.net/khncr59vyfztn6wj
- http://uploadboy.com/tvvs4p2gf03m/887/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
- https://filebin.net/khncr59vyfztn6wj