Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.

Published Dec 7, 2023 · Updated Oct 9, 2024 · Assigned by mitre