The AI Chatbot Free Models plugin for WordPress suffers from a CSV Injection vulnerability (CWE-1236) due to improper neutralization of formula elements in CSV exports generated by the 'newcodebyte_chatbot_export_messages' function. This allows unauthenticated attackers to embed malicious input into CSV files, which may execute code when opened in spreadsheet software that processes formulas. The vulnerability affects all versions up to and including 1.6.5. The CVSS 3.1 base score is 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N), reflecting network attack vector, low complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

An attacker can inject malicious formula code into CSV files exported by the plugin, which may execute when the file is opened by a user in a vulnerable spreadsheet application. This can lead to limited integrity impact such as executing unintended commands or scripts on the local system. There is no direct impact on confidentiality or availability according to the CVSS vector. The vulnerability requires user interaction (opening the CSV file) and does not require authentication to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening CSV files exported from this plugin, especially if received from untrusted sources. Applying input sanitization or filtering on exported CSV content manually may reduce risk. Monitor the vendor's channels for updates or patches addressing this vulnerability.