RosarioSIS vulnerable to CSV Injection

MEDIUM 5.4CVE-2023-29918 · GHSA-f8hp-grmr-pp7j · Published 02/05/2023 · updated 17/06/2026

In short

CVE-2023-29918 is a MEDIUM (CVSS 5.4) vulnerability affecting francoisjacquet/rosariosis, rosariosis (rosariosis).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
francoisjacquet/rosariosis Packagist	`≤ 10.8.4`	No fix yet
rosariosis rosariosis	`= 10.8.4`	No fix yet

RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.

NVD description

RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≤ 10.8.4

No fix yet

= 10.8.4

No fix yet

More vulnerabilities in francoisjacquet/rosariosis

See all →