CVE-2022-2240

HIGH · CVSS 8.8 EPSS 1.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-07-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-2240

Severity

HIGH

CVSS

8.8

EPSS

1.38%

WordPress

Original NVD Description

The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin download and open it