TI-2023-30622 CVE-2023-54348 · GHSA-h3v8-v9f6-ffjp
ERPGo SaaS 3.9 CSV Injection via Vendor Creation
Priority HIGH 73
ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of users who open the exported CSV in a spr…