CVE-2020-22275
N/A
N/A
Summary
Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://filebin.net/30ceikgukh268yyj
- http://uploadboy.com/ty0715vdcii6/886/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22275.pdf
References
- https://filebin.net/30ceikgukh268yyj
- http://uploadboy.com/ty0715vdcii6/886/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22275.pdf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.