blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2020-22275

HIGH 8.8 CVSS 3.1
Published
November 4, 2020
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-1236
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.

Affected products and versions

  • n/a n/a — Versions not specified
  • easyregistrationforms easy_registration_forms — Version 2.0.6

References

  • uploadboy.com http://uploadboy.com/ty0715vdcii6/886/mp4 Product, Third Party Advisory
  • cert.ikiu.ac.ir https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22275.pdf Exploit, Third Party Advisory
  • filebin.net https://filebin.net/30ceikgukh268yyj Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record