https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:36:51.981286+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-25445 CVE-2020-25445 2026-10-09T21:36:51.999506+00:00

The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells are executed.