CVE-2018-11525 – Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection

https://notcve.org/view.php?id=CVE-2018-11525

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. El plugin "Advanced Order Export For WooCommerce" para WordPress (versiones 1.5.4 y anteriores) es vulnerable a una inyección de CSV. WordPress Advanced Order Export for WooCommerce plugins versions prior to 1.5.4 suffer from a CSV injection vulnerability. • https://www.exploit-db.com/exploits/44931 https://wordpress.org/plugins/woo-order-export-lite/#developers https://wpvulndb.com/vulnerabilities/9096 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-1236: Improper Neutralization of Formula Elements in a CSV File •