title: Contact Form Entries < 1.3.0 - CSV Injection
description: The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.
problem types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
affected:
{
vendor: Unknown
product: Contact Form Entries
versions:
status: affected, versionType: semver, version: 0, lessThan: 1.3.0
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}