| Package | Affected versions | Patched versions |
|---|---|---|
| i-doit | ≤ 1.14.2 |
A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free