Vulnerability Details CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://uploadboy.com/tvvs4p2gf03m/887/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
- https://filebin.net/khncr59vyfztn6wj
- http://uploadboy.com/tvvs4p2gf03m/887/mp4
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
- https://filebin.net/khncr59vyfztn6wj
Products affected by CVE-2020-22276
-
cpe:2.3:a:weformspro:weforms:1.4.7