Vulnerability in Zhblue Hustoj

CVE-2026-23873

hustoj is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. All versions are vulnerable to CSV Injection (Formula Injection) through the contest rank export functionality (contestrank.xls.php and admi…

EPSS: 0.000 (9.5th percentile) — read the EPSS interpretation.