CVE-2025-11279 | Axosoft Scrum and Bug Tracking 22.1.1.11545 Add Work Item Page Title csv injection

A vulnerability classified as critical was found in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection.

This vulnerability is reported as CVE-2025-11279. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.