critical9.8
CVE-2022-3463
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
Impact
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fluentforms | Contact Form | before 4.3.13 |