CoreCVE
Back

CRITICAL

FluentForm < 4.3.13 - CSV Injection

Published Nov 7, 2022

Description

The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1236

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner WPScan
Published Nov 7, 2022
Updated May 1, 2025
Reserved Oct 12, 2022
Link CVE-2022-3463
CISA Vulnrichment
Updated May 1, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-3463
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-3463