Mautic before 2.13.0 allows CSV injection.Referenceshttps://github.com/mautic/mautic/releases/tag/2.13.0