exploitDog

GHSA-w3w2-8hq7-8fmw

Опубликовано: 21 нояб. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

Ссылки

EPSS

Процентиль: 79%

0.01307

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-1236

Связанные уязвимости

CVE-2022-3600

CVSS3: 9.8

nvd

около 3 лет назад

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

EPSS

Процентиль: 79%

0.01307

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-1236