7.8
High
CVE-2022-3604 The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could…
Description
The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form Entries 1.3 | earliest → < 1.3.0 | 1.3.0 |