KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function.
References
| Link | Resource |
|---|---|
| https://gist.github.com/6en6ar/5d39374d6ced8acbe489e0b1b932d056 | Third Party Advisory |
| https://gist.github.com/6en6ar/5d39374d6ced8acbe489e0b1b932d056 | Third Party Advisory |
Configurations
History
No history.
Information
Published : 2025-01-23 22:15
Updated : 2025-02-07 21:03
NVD link : CVE-2023-46400
Mitre link : CVE-2023-46400
CVE.ORG link : CVE-2023-46400
JSON object : View
Products Affected
kwhotel
- kwhotel
CWE
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
