Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.

Product Status

Learn more

Versions 1 Total

Default Status: unknown

affected

  • affected from 1.2.5.6 before 1.2.5.6 

Credits

  • SunCSR-thiennv

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.