Description
CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More Security Bypass (16.26.6)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2022-22005)
WordPress Plugin VideoWhisper Video Presentation 'c_status.php' SQL Injection (1.1)
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.2)
WordPress Plugin WP-VR-view-Add Photo Sphere, 360 video to WordPress Cross-Site Scripting (1.6)