CVE-2022-42882 – WordPress Simple CSV/XLS Exporter Plugin <= 1.5.8 is vulnerable to CSV Injection

https://notcve.org/view.php?id=CVE-2022-42882

02 Mar 2023 — Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a through 1.5.8. Neutralización inadecuada de elementos de fórmula en una vulnerabilidad de CSV File en Shambix Simple CSV/XLS Exporter. Este problema afecta a Simple CSV/XLS Exporter: desde n/a hasta 1.5.8. The Simple CSV/XLS Exporter plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 1.5.8. This allows attackers wit... • https://patchstack.com/database/vulnerability/simple-csv-xls-exporter/wordpress-simple-csv-xls-exporter-plugin-1-5-8-authenticated-csv-injection-vulnerability?_s_id=cve • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-1236: Improper Neutralization of Formula Elements in a CSV File •