title: WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection
description: Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.
problem types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: directorist
product: Directorist – WordPress Business Directory Plugin with Classified Ads Listings
vendor: wpWax
versions:
changes: [at: 7.7.2, status: unaffected], lessThanOrEqual: 7.7.1, status: affected, version: n/a, versionType: custom
}
solutions: Update to 7.7.2 or a higher version.