WordPress Plugin Vulnerabilities
Connections Business Directory < 9.7 - Admin+ CSV Injection
Description
The plugin does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
Proof of Concept
1. Visit https://example.com/wordpress/wp-admin/admin.php?page=connections_add 2. In the input filed add payload @SUM(1+1)*cmd|' /C calc'!A0 3. Visit Connections Tools and then click on Export All 4. It will download a file cn-export-all-MM-DD-YYYY.csv open it with Microsoft Excel
Affects Plugins
Fixed in 9.7 References
Classification
Type
CSV INJECTION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Rudra Sarkar
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2020-05-29 (about 3 years ago)
Added
2021-10-25 (about 2 years ago)
Last Updated
2022-04-13 (about 2 years ago)
WPScan 