Csv+ Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Csv+ Project records in CISA KEV

No Csv+ Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Csv+ 1 record MEDIUM

Records

1 record

TI-2022-05632 CVE-2022-21241 · GHSA-h95w-c385-8x7j

Cross-site scripting in Plus one CSV+

MEDIUM 47

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.03174 Published 2022-02-08 Fixed in 0.8.1 CWE-79

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0