CVE-2020-22275

Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands

published November 4, 2020

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02170 · 82.1th percentile
Published
2020-11-04T16:59Z
EPSS history
Timeline
  • 04 NOV 16:59Z
    Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands
    cvelistv5