title: Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
description: Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.
problem types: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
affected:
{
product: Contact Form 7 Database Addon
vendor: Unknown
versions:
lessThan: 1.2.5.6, status: affected, version: 1.2.5.6, versionType: custom
}