CVE-2022-44738
Assigner: Patchstack
Published: 2023-11-07T17:08:55.729Z
State: PUBLISHED
affected: collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: posts-and-users-stats
product: Posts and Users Stats
vendor: Patrick Robrecht
versions: changes: at: 1.1.4
status: unaffected
lessThanOrEqual: 1.1.3
status: affected
version: n/a
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Mika (Patchstack Alliance)
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.<p>This issue affects Posts and Users Stats: from n/a through 1.1.3.</p>
value: Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3.


problemTypes: descriptions: cweId: CWE-1236
description: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: Update to&nbsp;1.1.4 or a higher version.
value: Update to 1.1.4 or a higher version.
source: discovery: EXTERNAL
title: WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection
x_generator: engine: Vulnogram 0.1.0-dev