Skip to main content

Post To Csv

3 CVEs product

Monthly

CVE-2023-36527 Nov 07, 16:15 MEDIUM This Month

A vulnerability in bestweblayout Post to CSV by BestWebSoft post-to-csv.4.0. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin Post To Csv Bestwebsoft
NVD
CVSS 3.1
4.7
EPSS
0.7%
CVE-2022-3393 Oct 25, 17:15 CRITICAL POC Act Now

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Code Injection Post To Csv Bestwebsoft
NVD WPScan VulDB
CVSS 3.1
9.8
EPSS
1.3%
CVE-2017-2171 May 22, 16:29 MEDIUM This Month

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Google Smtp Contact Form Captcha +49
NVD
CVSS 3.0
6.1
EPSS
0.2%
EPSS 1% CVSS 4.7
MEDIUM This Month

A vulnerability in bestweblayout Post to CSV by BestWebSoft post-to-csv.4.0. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin +2
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Code Injection Post To Csv +1
NVD WPScan VulDB
EPSS 0% CVSS 6.1
MEDIUM This Month

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Google Smtp +51
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy