Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| event_registration_application_project | event_registration_application | 1.0 |