Search Vulnerabilities

Statamic: CSV formula injection in form submission exports

Incorrect neutralisation in the PrestaShop firmware

Snipe-IT: CSV formula injection in Activity Report export

Actual: CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `escapeCsv` Helper

Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications

Code Injection in Mia Technologies' Pizzy Library

HCL iControl was affected by Export CSV - CSV Injection vulnerability.

SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injection

Versions of the package json-2-csv from 3

RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps

Dell ECS versions 3

Kimai: Formula Injection via tag names in XLSX export

traccar allows CSV formula injection via exported position data

ERPGo SaaS 3.9 CSV Injection via Vendor Creation

MaxKB has CSV Injection in its Application Chat Export Functionality

If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data

Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export

Tendenci 12.3.1 - CSV/ Formula Injection

dirsearch 0.4.1 - CSV Injection