Critical severity9.8NVD Advisory· Published Dec 24, 2025· Updated Apr 15, 2026
CVE-2018-25135
CVE-2018-25135
Description
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing user data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: =4.3.6.0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.