JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer’s profile.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22274
Reference (s):
- http://uploadboy.me/iypl38958pon/JomSocial.mp4.html
- https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22274.pdf
- https://gofile.io/?c=LsAOtL