NetSight
critical9.8

CVE-2022-26249

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a…

Impact

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

Affected products

VendorProductAffected versions
Surveyking ProjectSurveyking
Version 0.3.0

Weakness classification

References