Booking Core has an unspecified vulnerability

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core has a security vulnerability that stems from the subscription functionality in Ultimate Booking System 1.7.0 being vulnerable to CSV formula injection. An attacker could exploit this vulnerability to execute the contents of a cell when a backend administrator downloads and opens the csv.