WeForms WordPress Plugin 1.4.7 allows CSV injection via a form’s entry.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22276
Reference (s):
- http://uploadboy.com/tvvs4p2gf03m/887/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
- https://filebin.net/khncr59vyfztn6wj