Read the docs

Csv+ Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Csv+ Project records in CISA KEV

No Csv+ Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Csv+ 1 record MEDIUM

Records

1 record in Csv+ · all components

TI-2022-05632 CVE-2022-21241 · GHSA-h95w-c385-8x7j

Cross-site scripting in Plus one CSV+

Priority MEDIUM 47

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.03174 Published 2022-02-08 Fixed in 0.8.1 CWE-79
Open these records in search →