CVE-2022-21241

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag...

PT-2022-14945

Name of the Vulnerable Software and Affected Versions CSV+ versions prior to 0.8.1 Description A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains an HTML a tag. Recommendatio...

CVE-2022-21241: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag...