CVEvulnerability
CVE-2020-22275
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-1236
Description
Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.
Affected configurations
• easyregistrationforms easy registration forms 2.0.6
Related
Weakness · CWE (1)
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness
References
- http://uploadboy.com/ty0715vdcii6/886/mp4 Product, Third Party Advisory
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22275.pdf Exploit, Third Party Advisory
- https://filebin.net/30ceikgukh268yyj Exploit, Third Party Advisory
- http://uploadboy.com/ty0715vdcii6/886/mp4 Product, Third Party Advisory
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22275.pdf Exploit, Third Party Advisory
- https://filebin.net/30ceikgukh268yyj Exploit, Third Party Advisory