CVE Database /
CVE-2023-0721
CVE · High
CVE-2023-0721 — MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor [metform] < 3.3.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-0721
|
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor [metform] < 3.3.1 |
Improper Neutralization of Formula Elements in a CSV File |
High
7.8
|
< 3.3.1
|
3.3.1 |
2023-06-08 |
—
|
CVE-2023-0721
The MetForm plugin for Elementor versions prior to 3.3.1 contain a CSV injection vulnerability that could allow attackers to embed malicious formulas into exported CSV files. When opened in spreadsheet applications, these crafted formulas could trigger command execution or exploit weaknesses in the spreadsheet software, potentially compromising the victim's computer. The issue has been resolved in version 3.3.1 and users should upgrade immediately.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings