| Package | Affected versions | Patched versions |
|---|---|---|
| contact form | < 4.3.13 | 4.3.13 |
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free