WordPress Plugin Vulnerabilities

Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection

Description

The plugin does not validate data when outputting it back in a CSV file, which could lead to CSV injection.

Proof of Concept

- Place a WooCommerce order using "=5+5" as first_name.
- Export the data as CSV.
- Open the CSV with a spreadsheet application (Excel, Libre Office).
- The CSV formula gets executed.

Affects Plugins

Plugin icon
export-woocommerce-customer-list
Fixed in 2.0.69

References

CVE
CVE-2022-3603

Classification

Type
CSV INJECTION
OWASP top 10
A1: Injection
CWE
CWE-1236
CVSS
3.4 (low)

Miscellaneous

Original Researcher
Francesco Carlucci
Submitter
Francesco Carlucci
Submitter website
https://carluc.ci
Submitter twitter
francecarlucci
Verified
Yes
WPVDB ID
376e2bc7-2eb9-4e0a-809c-1582940ebdc7

Timeline

Publicly Published
2022-11-09 (about 1 years ago)
Added
2022-11-03 (about 1 years ago)
Last Updated
2022-11-09 (about 1 years ago)

Other

Published
Title
Published
2023-02-02
Title
Simple History < 3.4.0 - Improper Neutralization of Formula Elements in a CSV File
Published
2021-01-25
Title
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Published
2020-05-29
Title
Connections Business Directory < 9.7 - Admin+ CSV Injection
Published
2022-10-18
Title
WPForms Pro < 1.7.7 - CSV Injection
Published
2023-11-07
Title
Export Users Data CSV < 2.2 - Improper Neutralization of Formula Elements in a CSV File