CWE-1236 · Improper Neutralization of Formula Elements in a CSV File (page 4)
Page 4 of 4 — CVEs classified under CWE-1236, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15571 | High | 8.6 | 2018-08-28 | The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection. |
CVE-2018-11526 | High | 7.8 | 2018-06-19 | The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection. |
CVE-2018-11525 | High | 7.8 | 2018-06-19 | The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. |
CVE-2018-11652 | Critical | 9.8 | 2018-06-01 | CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header… |
CVE-2018-10258 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included… |
CVE-2018-10257 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be in… |
CVE-2018-10255 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will b… |
CVE-2018-10504 | High | 7.8 | 2018-04-27 | The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection. |
CVE-2018-9137 | Medium | 6.8 | 2018-04-19 | Open-AudIT before 2.2 has CSV Injection. |
CVE-2018-8092 | Critical | 9.8 | 2018-04-18 | Mautic before 2.13.0 allows CSV injection. |
CVE-2018-9035 | Critical | 9.6 | 2018-04-04 | CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject s… |
CVE-2018-9107 | High | 8.8 | 2018-03-28 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a va… |
CVE-2018-9106 | High | 8.8 | 2018-03-28 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value… |
CVE-2018-7304 | High | 8.8 | 2018-02-21 | Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machi… |