Threats tagged 'ghsa-jr43-66v9-wj8m'

A code injection vulnerability exists in Fengoffice Feng Office versions up to 3.11.13.11 and 4.2.1.2 in the Translation Tool component's write_translations function. The flaw arises from manipulation of the 'lang' argument, allowing remote attackers to inject code. Public exploit code is available. The vendor has not responded to disclosure requests, and no patch information is provided.