CVE-2021-24144 | BDVDB-2026-150620 Detail

Contact Form 7 Database Addon

Description#

Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

References#

https://wpscan.com/vulnerability/143cdaff-c536-4ff9-8d64-c617511ddd48

Exploit#

No public exploit known

History#

Version 12021-03-18Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.