CWE-1236 · Injection and Smuggling
Improper Neutralization of Formula Elements in a CSV File
323CVEs
0exploited
0with a public check
4likely (EPSS 10%+)
SortMost likely exploited
323 CVEs with CWE-1236 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-33256A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username paramet…Zohocorp · Manageengine Adselfservice Plus · 2021-08-09 | – | 79% | 2021-08-09 |
| CVE-2018-11652CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly i…Cirt.net · Nikto · 2018-06-01 | – | 23% | 2018-06-01 |
| CVE-2020-36962Tendenci 12.3.1 - CSV/ Formula InjectionTendenci · Tendenci · CVSS 9.8 · 2026-01-28 | 9.8 | 12% | 2026-01-28 |
| CVE-2019-12765An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection.Joomla · Joomla! · 2019-06-11 | – | 10% | 2019-06-11 |
| CVE-2019-14749An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are gen…Enhancesoft · Osticket · 2019-08-07 | – | 9.6% | 2019-08-07 |
| CVE-2020-9372The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then cou…Codepeople · Appointment Booking Calendar · 2020-03-04 | – | 8.6% | 2020-03-04 |
| CVE-2020-9347Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the…Zohocorp · Manageengine Password Manager Pro · 2020-03-16 | – | 7.8% | 2020-03-16 |
| CVE-2018-9035CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas…Contact-Form-7-To-Database-Extension Project · Contact-Form-7-To-Database-Extension · 2018-04-04 | – | 7.3% | 2018-04-04 |
| CVE-2018-10258A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV…Codeslab · Shopy Point Of Sale · 2018-05-01 | – | 7.2% | 2018-05-01 |
| CVE-2018-9107CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandl…Acyba · Acymailing · 2018-03-28 | – | 7.0% | 2018-03-28 |
| CVE-2018-10255A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the ex…Clustercoding · Blog Master Pro · 2018-05-01 | – | 6.9% | 2018-05-01 |
| CVE-2018-9106CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled i…Acyba · Acysms · 2018-03-28 | – | 6.4% | 2018-03-28 |
| CVE-2020-11548The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV inj…Search Meter Project · Search Meter · 2020-04-04 | – | 5.2% | 2020-04-04 |
| CVE-2019-15092The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name colu…Webtoffee · Import Export Wordpress Users · 2019-08-23 | – | 5.1% | 2019-08-23 |
| CVE-2018-11526The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.Webtoffee · Wordpress Comments Import And Export · 2018-06-19 | – | 5.0% | 2018-06-19 |
| CVE-2018-11525The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.Algolplus · Advanced Order Export For Woocommerce · 2018-06-19 | – | 5.0% | 2018-06-19 |
| CVE-2018-10504The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.Web-Dorado · Form Maker · 2018-04-27 | – | 4.4% | 2018-04-27 |
| CVE-2019-4071IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caus…IBM · Spectrum Control Standard Edition · CVSS 6.8 · 2019-05-09 | 6.8 | 4.3% | 2019-05-09 |
| CVE-2018-10257A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the export…Hrsale Project · Hrsale · 2018-05-01 | – | 4.2% | 2018-05-01 |
| CVE-2022-3634Contact Form 7 Database Addon < 1.2.6.5 - CSV InjectionCiphercoin · Contact Form 7 Database Addon · CVSS 9.8 · 2022-11-21 | 9.8 | 4.0% | 2022-11-21 |
| CVE-2018-20752An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses an…Recon-Ng Project · Recon-Ng · 2019-02-04 | – | 3.4% | 2019-02-04 |
| CVE-2018-15474CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attackers to exfiltrate sens…Dokuwiki · Dokuwiki · 2018-09-07 | – | 3.3% | 2018-09-07 |
| CVE-2019-13181A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.Solarwinds · Serv-U Ftp Server · 2019-12-16 | – | 3.2% | 2019-12-16 |
| CVE-2019-16120CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.Liquidweb · Event Tickets · 2019-09-08 | – | 3.2% | 2019-09-08 |
| CVE-2020-22276WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.Weformspro · Weforms · 2020-11-04 | – | 3.0% | 2020-11-04 |
| CVE-2022-0142Visual Form Builder < 3.0.6 - CSV InjectionVfbpro · Visual Form Builder · 2022-04-12 | – | 2.9% | 2022-04-12 |
| CVE-2020-4633IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.IBM · Resilient · CVSS 6.8 · 2020-12-11 | 6.8 | 2.9% | 2020-12-11 |
| CVE-2020-7947An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sources. One issue with…Auth0 · Login By Auth0 · 2020-04-01 | – | 2.8% | 2020-04-01 |
| CVE-2018-9137Open-AudIT before 2.2 has CSV Injection.Open-Audit · Open-Audit · 2018-04-19 | – | 2.7% | 2018-04-19 |
| CVE-2019-4521Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by imprope…IBM · Cloud Pak System · CVSS 7 · 2019-12-10 | 7.0 | 2.6% | 2019-12-10 |
| CVE-2019-4364IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 16168…IBM · Maximo Asset Management · CVSS 5.5 · 2019-06-19 | 5.5 | 2.6% | 2019-06-19 |
| CVE-2019-17661A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers. By choosing formula…Admincolumns · Admin Columns · CVSS 8.8 · 2019-11-08 | 8.8 | 2.4% | 2019-11-08 |
| CVE-2022-1544Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in luyadev/yii-helpersluyadev · luyadev/yii-helpers · CVSS 8 · 2022-05-01 | 8.0 | 2.4% | 2022-05-01 |
| CVE-2020-4689IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file c…IBM · Security Guardium · CVSS 6.8 · 2020-10-12 | 6.8 | 2.4% | 2020-10-12 |
| CVE-2019-20180The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with…Tablepress · Tablepress · 2020-01-09 | – | 2.3% | 2020-01-09 |
| CVE-2020-28861OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access…Openasset · Digital Asset Management · 2020-12-14 | – | 2.3% | 2020-12-14 |
| CVE-2019-11872The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window. Successful exploitation…Incsub · Hustle · 2019-05-29 | – | 2.2% | 2019-05-29 |
| CVE-2018-20468An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed E…Sahipro · Sahi Pro · 2019-06-17 | – | 2.2% | 2019-06-17 |
| CVE-2020-22275Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CS…Easyregistrationforms · Easy Registration Forms · 2020-11-04 | – | 2.2% | 2020-11-04 |
| CVE-2023-29918RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.Rosariosis · Rosariosis · CVSS 5.4 · 2023-05-02 | 5.4 | 2.2% | 2023-05-02 |
| CVE-2019-0403SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.SAP SE · SAP Enable Now · 2019-12-11 | – | 2.1% | 2019-12-11 |
| CVE-2021-38180SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data export. An attacker…SAP SE · SAP Business One · 2021-10-12 | – | 2.1% | 2021-10-12 |
| CVE-2020-4759IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper valida…IBM · FileNet Content Manager · CVSS 7 · 2020-11-09 | 7.0 | 2.0% | 2020-11-09 |
| CVE-2020-25398CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.Mind · Imind Server · 2020-11-05 | – | 2.0% | 2020-11-05 |
| CVE-2022-3393Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV InjectionBestwebsoft · Post to CSV by BestWebSoft · CVSS 9.8 · 2022-10-25 | 9.8 | 1.9% | 2022-10-25 |
| CVE-2022-26249Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attac…Surveyking Project · Surveyking · 2022-03-24 | – | 1.9% | 2022-03-24 |
| CVE-2021-46363An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrar…Magnolia-Cms · Magnolia Cms · 2022-02-11 | – | 1.9% | 2022-02-11 |
| CVE-2020-22277Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.Codection · Import And Export Users And Customers · 2020-11-04 | – | 1.8% | 2020-11-04 |
| CVE-2019-13144myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5.Mytinytodo · Mytinytodo · 2019-07-05 | – | 1.8% | 2019-07-05 |
| CVE-2021-3188phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.Phplist · Phplist · 2021-01-21 | – | 1.8% | 2021-01-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.