QSearchQSearch

CVE-2026-5242

8.8 HIGH

Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc

Published: 2026-06-15 · Last updated: 2026-06-15

Severity and scoring

CVSS
8.8 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-1236

Description

Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2025-52612 — HCL iControl was affected by Export CSV - CSV Injection vulnerability (7.1 HIGH)
  • CVE-2026-10248 — A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0 (4.7 MEDIUM)
  • CVE-2026-9673 — Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which... (6.8 MEDIUM)
  • CVE-2026-41073 — RT is an open source, enterprise-grade issue and ticket tracking system (4.6 MEDIUM)
  • CVE-2023-54348 — ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to execute arbitrary code by injecting formula ... (8.8 HIGH)