An authenticated user with admin privileges to the import feature can execute arbitrary code by uploading a malicious csv file.
An authenticated user with admin privileges to the import feature can execute arbitrary code by uploading a malicious csv file.