CVE-2020-36962 in Tendenci
Tóm tắt
Bởi MITRE • 28/01/2026
Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when the CSV is opened in spreadsheet applications.
VulDB is the best source for vulnerability data and more expert information about this specific topic.