Total
312 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-46804 | 1 Narolainfotech | 1 Export Users Data Distinct | 2026-06-17 | N/A | 5.8 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3. | |||||
| CVE-2022-46803 | 1 Noptin | 1 Noptin | 2026-06-17 | N/A | 6.1 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5. | |||||
| CVE-2022-46802 | 1 Webtoffee | 1 Product Reviews Import Export For Woocommerce | 2026-06-17 | N/A | 6.1 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects Product Reviews Import Export for WooCommerce: from n/a through 1.4.8. | |||||
| CVE-2022-46801 | 1 Geminilabs | 1 Site Reviews | 2026-06-17 | N/A | 6.1 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0. | |||||
| CVE-2022-46408 | 1 Ericsson | 1 Network Manager | 2026-06-17 | N/A | 6.8 MEDIUM |
| Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker would need admin/elevated access to exploit the vulnerability. | |||||
| CVE-2022-45810 | 1 Icegram | 1 Icegram Express | 2026-06-17 | N/A | 4.7 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce: from n/a through 5.5.2. | |||||
| CVE-2022-45370 | 1 Webtoffee | 1 Wordpress Comments Import And Export | 2026-06-17 | N/A | 6.1 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1. | |||||
| CVE-2022-45360 | 1 Coffee2code | 1 Commenter Emails | 2026-06-17 | N/A | 4.7 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through 2.6.1. | |||||
| CVE-2022-45357 | 1 Lenderd | 1 1003 Mortgage Application | 2026-06-17 | N/A | 6.1 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75. | |||||
| CVE-2022-45350 | 1 Simple-history | 1 Simple History | 2026-06-17 | N/A | 5.8 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1. | |||||
| CVE-2022-45348 | 1 Anmari | 1 Amr Users | 2026-06-17 | N/A | 5.8 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4. | |||||
| CVE-2022-45078 | 1 Solwininfotech | 1 User Blocker | 2026-06-17 | N/A | 5.9 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Solwin Infotech User Blocker.This issue affects User Blocker: from n/a through 1.5.5. | |||||
| CVE-2022-44830 | 1 Event Registration Application Project | 1 Event Registration Application | 2026-06-17 | N/A | 7.8 HIGH |
| Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file. | |||||
| CVE-2022-44738 | 1 Patrickrobrecht | 1 Posts And Users Stats | 2026-06-17 | N/A | 5.8 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3. | |||||
| CVE-2022-42882 | 1 Shambix | 1 Simple Csv\/xls Exporter | 2026-06-17 | N/A | 5.8 MEDIUM |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a through 1.5.8. | |||||
| CVE-2022-41791 | 1 Metagauss | 1 Profilegrid | 2026-06-17 | N/A | 6.8 MEDIUM |
| Auth. (subscriber+) CSV Injection vulnerability in ProfileGrid plugin <= 5.1.6 on WordPress. | |||||
| CVE-2022-41675 | 1 Raidenmaild | 1 Raidenmaild | 2026-06-17 | N/A | 8.0 HIGH |
| A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side. | |||||
| CVE-2022-41616 | 1 Kaushikkalathiya | 1 Export Users Data | 2026-06-17 | N/A | 7.6 HIGH |
| Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: from n/a through 2.1. | |||||
| CVE-2022-40472 | 1 Zktec | 1 Zkbio Time | 2026-06-17 | N/A | 8.0 HIGH |
| ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module. | |||||
| CVE-2022-40294 | 1 Phppointofsale | 1 Php Point Of Sale | 2026-06-17 | N/A | 8.8 HIGH |
| The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers. | |||||