← Database

CVE-2022-21241

CRITICAL CVSS: 9.6 Published: 2022-02-08 Modified: 2026-06-17

Description

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.

Affected Platforms

Csv\+ Project Csv\+

Weakness Type

CWE-79

References