CVE-2026-65461

CriticalCVSS 9.1

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

Really Simple CSV Importer versions up to 1.3 contain an Administrator Arbitrary File Upload vulnerability. An administrator can upload a malicious file, potentially leading to remote code execution on the server.

Risk Assessment

The risk includes arbitrary code execution by an administrator, potentially leading to full server compromise and data breach.

Recommendation

It is recommended to upgrade Really Simple CSV Importer to version 1.4 or later.

Original NVD description (English source)

Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.