title: WPForms Pro < 1.7.7 - CSV Injection
description: The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
problem types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
affected:
{
vendor: Unknown
product: WPForms Pro
versions:
version: 1.7.7, status: affected, lessThan: 1.7.7, versionType: custom
}