Feed/CVE-2022-3393
CVE-2022-3393CRITICALCVSS 9.8

CVE-2022-3393

Published Oct 25, 2022·Updated Jun 16, 2026

NVD Description

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free