CVE-2019-20180

Katalog CVE

CVSS 6.8 · Medium EPSS 2,3%

Kerentanan Improper Neutralization of Formula Elements in a CSV File pada tablepress. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress.

Rincian

Terbit di NVD

9 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1236: Improper Neutralization of Formula Elements in a CSV File

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 83,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wordpress.org/support/topic/security-issue-cve-2019-20180-for-tablepress/#post-16282996 issue tracking · advisory pihak ketiga
• https://medium.com/%40Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8
• https://wpvulndb.com/vulnerabilities/10016 broken link