Design/Logic Flaw

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...