VULNERABILITY INTELLIGENCE

CVE-2022-44830

CVSS score7.8 HIGH
EPSS probability0.59%
CISA KEVNot currently listed
Published2022-11-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.

Weakness classification

  • CWE-1236: Improper Neutralization of Formula Elements in a CSV File

Primary references