CWE-1236
CWE-1236 · 15 records · 8 with a public proof-of-concept
Records the NVD classes under CWE-1236, highest CVSS first.
- HIGH 7.1CVE-2026-67187
Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NF_Ab…
- HIGH 7.1CVE-2026-116649
Tanium addressed an improper output sanitization vulnerability in Enforce.
- HIGH 7.1CVE-2026-116647
Tanium addressed an improper output sanitization vulnerability in Comply.
- MEDIUM 6.1CVE-2026-93581
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields…
- MEDIUM 5.5CVE-2026-124591public PoC
A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early throu…
- MEDIUM 5.4CVE-2026-121433public PoC
AzuraCast before 0.24.0 contains a stored CSV formula injection vulnerability that allows station users with Media permission to persist formula-prefixed metadata via bulk media import. Attackers can import crafted titles, artists, or custom fields through /ap…
- MEDIUM 5.4CVE-2026-55154public PoC
EspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/Espo/Tools/Export/Format/Csv/Processor.php, application/Espo/Tools/Export/Format/Xlsx/OpenSpoutProcessor.php, and application/Espo/Tools/Export/Format/Xlsx/PhpS…
- MEDIUM 5.4CVE-2026-100564public PoC
OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in …
- MEDIUM 5.4CVE-2026-100563public PoC
OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust partici…
- MEDIUM 4.6CVE-2026-86020public PoC
Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB contains a spreadsheet formula injection vulnerability in the part import/export workflow. An authenticated user with permission to import parts c…
- MEDIUM 4.2CVE-2026-109396public PoC
Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fields. Attackers can submit names, addresse…
- MEDIUM 4.2CVE-2026-108579public PoC
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERL…
- MEDIUM 4.1CVE-2026-116648
Tanium addressed an improper output sanitization vulnerability in Discover.
discover
- UNSCOREDCVE-2026-111038
CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event names or templates within the Tenders module, are not properly validated or…
- UNSCOREDCVE-2026-102799
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16