CVE-2022-21241

Published February 8th, 2022

View on NVD ↗

CVSS v3

9.6

CRITICAL

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.

plusone-masaki/csv-plus

A completely new CSV editor that gives you a great experience with simple operations.

GitHub

272