CVE-2022-2798CWE-1236

Affiliates Manager < 2.9.14 - Affiliate CSV Injection

published September 16, 2022

CVSS
—
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the data

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01226 · 68.6th percentile
Weakness
CWE-1236 · Improper Neutralization of Formula Elements in a CSV File
Published
2022-09-16T08:40Z
EPSS history
Timeline
  • 16 SEP 08:40Z
    Affiliates Manager < 2.9.14 - Affiliate CSV Injection
    cvelistv5