The Exports and Reports WordPress plugin prior to 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
exports and reports project exports and reports |
Vulmon