← Database

CVE-2022-26249

CRITICAL CVSS: 9.8 Published: 2022-03-24 Modified: 2026-06-17

Description

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

Affected Platforms

Surveyking Project Surveyking

Weakness Type

CWE-1236

References