The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.
2019-07-18T12:15:11.580
2024-11-21T02:44:41.313
Modified
CVSSv3.0: 7.5 (HIGH)
AV:N/AC:H/Au:N/C:P/I:P/A:P
4.9
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | automattic | camptix_event_ticketing | < 1.5.0 | Yes |