CVE-2018-16308

The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.

Score

CVSS 3.0 8.6 High

Status

Modified - cve@mitre.org

Published

2018-09-01

Last modified

2024-08-05

Weaknesses

CWE-1236

Affected products

• Ninja Forms (Ninjaforms)

References

• https://packetstormsecurity.com/files/148993/WordPress-Ninja-Forms-3.3.13-CSV-Injection.html
• https://wordpress.org/plugins/ninja-forms/#developers
• https://www.exploit-db.com/exploits/45234/