The CampTix Event Ticketing plugin prior to 1.5 for WordPress allows CSV injection when the export tool is used.
automattic camptix event ticketing