Skip to main content

Site Reviews CVE-2022-46801

MEDIUM
Improper Neutralization of Formula Elements in a CSV File (CWE-1236)
2023-11-07 audit@patchstack.com
WordPress Information Disclosure Site Reviews Wordpress Plugin Geminilabs
6.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 07, 2023 - 17:15 cve.org
MEDIUM 6.1

DescriptionCVE.org

A vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects Site Reviews: from n/a through <= 6.2.0.

AnalysisAI

A vulnerability in Gemini Labs Site Reviews site-reviews.2.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1236. A vulnerability in Gemini Labs Site Reviews site-reviews.2.0. Affected products include: Geminilabs Site Reviews.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Site Reviews

View all
CVE-2025-1232 HIGH POC
8.8 Mar 19

The Site Reviews WordPress plugin before version 7.2.5 contains a stored XSS vulnerability via review fields. Unauthenti
CVE-2024-3050 CRITICAL POC
9.1 May 29

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowin
CVE-2026-82925 HIGH POC
8.1 Sep 10

PHP object injection in the Site Reviews WordPress plugin before 8.3.0 allows unauthenticated remote attackers to deseri
CVE-2021-24603 MEDIUM POC
5.4 Sep 06

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an

CVE-2023-1525 MEDIUM POC
4.8 May 02

The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high
CVE-2026-73382 HIGH
7.1 Aug 18

Cross-site scripting in the Site Reviews WordPress plugin by Gemini Labs (versions up to and including 8.2.0) allows una
CVE-2018-0603 MEDIUM
6.1 Jun 26

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary

CVE-2023-27629 MEDIUM
5.4 Jun 22

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor pat
CVE-2023-27612 MEDIUM
5.4 Jun 22

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor pat

Same weakness CWE-1236 – Improper Neutralization of Formula Elements in a CSV File

View all
CVE-2019-14749 HIGH POC
8.8
CVE-2020-36962 CRITICAL POC
9.8
CVE-2023-46401 CRITICAL POC
9.8
CVE-2025-56267 CRITICAL POC
9.8
CVE-2021-47901 CRITICAL POC
9.8
CVE-2020-36941 CRITICAL POC
9.8
CVE-2022-3574 CRITICAL POC
9.8
CVE-2022-3463 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2022-46801 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy