Not rated
CVE-2021-24144 Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability…
Description
Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form 7 Database Addon 1.2 | earliest → < 1.2.5.6 | 1.2.5.6 |