Lucene search
MitreCVELIST:CVE-2020-25445HistoryJul 14, 2021 - 2:40 p.m.
CVE-2020-25445
2021-07-1414:40:48
mitre
www.cve.org
0.001 Low
EPSS
Percentile
27.4%
The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells are executed.
Related
cnvd
cnvd
Booking Core has an unspecified vulnerability
2021-07-15 00:00:00
nvd
nvd
CVE-2020-25445
2021-07-14 15:15:08
cve
cve
CVE-2020-25445
2021-07-14 15:15:08
prion
prion
Input validation
2021-07-14 15:15:00