Skip to content
OpenAdvisories

Vendor

tendenci

2 known vulnerabilities.

Products

tendenci 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36962 EPSS 12%

    Tendenci 12.3.1 - CSV/ Formula Injection

    Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to tr…

    tendenci tendenci tendenci PyPI