https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 23:43:04 +0000 https://cve.radiocsirt.org/vuln/cve-2023-54348 <p><strong>Affected:</strong> Rajodiya ERPGo SaaS</p> <p>ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of users who open the exported CSV in a spreadsheet application. Attackers can add malicious formulas like =10+20+cmd|&#39; /C calc&#39;!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.</p> <p><strong>Affected:</strong> Rajodiya ERPGo SaaS</p> <p>ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of users who open the exported CSV in a spreadsheet application. Attackers can add malicious formulas like =10+20+cmd|&#39; /C calc&#39;!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.</p> https://cve.radiocsirt.org/vuln/cve-2023-54348