RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
| Software | From | Fixed in |
|---|---|---|
francoisjacquet / rosariosis
|
- | 10.8.4.x |
| rosariosis / rosariosis | 10.8.4 | 10.8.4.x |