Vendors / Contact-form-7-to-database-extension Project Contact-form-7-to-database-extension Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Contact-form-7-to-database-extension Project records in CISA KEV No Contact-form-7-to-database-extension Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.
CVSS 3.0 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.07301 · Published 2018-04-04 · No fix listed CWE-1236
Open these records in search → All records by CVSS severity
1 0 0 0 0
