← Back to browse · API

CVE-2022-3634

Severity
CRITICAL
CVSS
9.8
EPSS
0.03617
Risk score
40.47
CISA KEV
No
PoC
No
Published
2022-11-21
Modified
2025-04-29
First seen
2026-08-07
Aliases
EUVD-2022-42994, GHSA-C77W-6VG2-C6CJ
Products
Unknown:Contact Form 7 Database Addon 0 <1.2.6.5
Sources
euvd EUVD-2022-42994

Description

The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection

References