CSV+ vulnerabilities

1 known vulnerability in CSV+ from Plus one. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  CSV+: Improper Neutralization of Input During Web Page Generation

  CVE-2022-21241Feb 8, 2022Plus oneEPSS 3.2%

  Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.