CVE-2023-53929

This exploit demonstrates a CSV injection vulnerability in phpMyFAQ v3.1.12. By manipulating a user's name field to include a malicious payload (e.g., =calc|a!z|), an attacker can trigger arbitrary command execution when an admin exports user data to CSV and opens it in a vulnerable spreadsheet application.