Threats tagged 'ghsa-2q49-62r7-4h3r'

The Gutenverse Form plugin for WordPress versions prior to 3.2.2 contains a CSV formula injection vulnerability. This flaw allows unauthenticated attackers to inject malicious spreadsheet formulas via free-text fields submitted to the public form-submit REST route. The input sanitization does not remove formula-trigger characters such as =, +, @, or a leading minus. These malicious formulas are stored and later exported in CSV files without proper neutralization, leading to formula execution when the exported file is opened by an administrator. This can result in data exfiltration or command execution on the administrator's workstation.