CVE-2022-3393

CVE-2022-3393: Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection

Vendor Unknown

Product Post to CSV by BestWebSoft

Weakness CWE-1236

Published October 25, 2022

Last update May 7, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection

Key dates

02Disclosure timeline

October 25, 2022 CVE published

May 7, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3393 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1236.html

Related vulnerabilities

04Related CVE

CVE-2025-12249 Axosoft Scrum and Bug Tracking Edit Ticket csv injection CVE-2026-42267 Kimai: Formula Injection via tag names in XLSX export CVE-2022-45810 WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection CVE-2023-42004 IBM Security Guardium CSV injection CVE-2022-46803 WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection