CVE-2026-47705

TypeBot (chatbot builder) Version 3.16.1 contains a CSV injection vulnerability in the result export feature. The application does not sanitize or escape user-supplied input when generating CSV files, allowing an attacker to inject spreadsheet formulas into input fields. These formulas are execut...

CVE-2026-47705 TypeBot vulnerable to CSV injection in result export

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...