CVE-2026-124591
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Nov 09, 2026
Vendor
unknown
Description
A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.