CVEvulnerability

CVE-2022-2798

8.0 HIGH Published 2022-09-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-1236

Description

The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the data

Affected configurations

• wpaffiliatemanager affiliates manager (< 2.9.14)

Related

Weakness · CWE (1)

  • CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness

References