Exports and Reports vulnerabilities
We track 1 vulnerability in Exports and Reports products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 25, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Exports and Reports vulnerabilities
- 8.8 High severity
Exports and Reports: Improper Neutralization of Formula Elements in a CSV File
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks.