CVE-2020-12468

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

CSV Injection

subrion is vulnerable to CSV injection. The injection is possible because it does not sanitize a phrase value within a language, which is related to phrases/add/ and languages/download/...