CVE-2022-2240 — Request a Quote <= 2.3.7 - CSV Injection
The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could le…
Published: 2022-07-25 · CVSS: Unscored
The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin download and open it
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7