title: WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection
description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1.
problem types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: simple-history
product: Simple History – user activity log, audit tool
vendor: Pär Thernström
versions:
changes: [at: 3.4.0, status: unaffected], lessThanOrEqual: 3.3.1, status: affected, version: n/a, versionType: custom
}
solutions: Update to 3.4.0 or a higher version.