CVE-2020-22276 – WeForms WordPress Plugin 1.4.7 allows CSV injection via a form’s entry.

WeForms WordPress Plugin 1.4.7 allows CSV injection via a form’s entry.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22276

Reference (s):

• http://uploadboy.com/tvvs4p2gf03m/887/mp4
• https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
• https://filebin.net/khncr59vyfztn6wj