CRITICAL🇬🇧 English

CVE-2022-3463

CVSS 9.8v3.1pub. 2022-11-07upd. 2025-05-01

The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Fluentforms Contact Form

    APP
    Fluentforms
    < 4.3.13
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-2771CRITICAL9.8PL ✓ten sam produkt

Fluent Forms WordPress — privilege escalation przez brak weryfikacji uprawnień

CVE-2024-10646HIGH7.2ten sam produkt

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress...

CVE-2024-4157HIGH7.5ten sam produkt

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress...

CVE-2024-2782HIGH7.5ten sam produkt

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress...

CVE-2021-34620HIGH8.8ten sam produkt

The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to store...

CVE-2022-3463 — CRITICAL 9.8 | CVEbaza.pl