CVE-2020-13826: I-Doit

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export.

Affected products

• I-Doit I-Doit: up to and including 1.14.2

Published 2020-08-20. Last modified 2026-06-17.