RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
- https://docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/edit?usp=sharing
No PoCs found on GitHub currently.