CVE-2022-26249

9.8 criticalEPSS 1.9%

Critical (9.8) in surveyking project surveyking. EPSS 1.9% chance of exploitation in the next 30 days.

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-1236
Published: 2022-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

surveyking_project:surveyking

References

https://gitee.com/surveyking/surveyking/issues/I4V05A
https://gitee.com/surveyking/surveyking/issues/I4V05A

Check your stack JSON