9.8
Critical
CVE-2022-3634 The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV…
Description
The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form 7 Database Addon 1.2 | earliest → < 1.2.6.5 | 1.2.6.5 |