Description CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel. Remediation References CVE-2018-7201 Related Vulnerabilities Oracle JRE CVE-2022-21248 Vulnerability (CVE-2022-21248) WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.4) Drupal Core 8.9.x Cross-Site Request Forgery (8.9.0 - 8.9.18) WordPress Plugin AgentEasy Properties Cross-Site Scripting (1.0.4) MySQL CVE-2012-1703 Vulnerability (CVE-2012-1703) Severity High Classification CVE-2018-7201 CWE-1236 Tags Missing Update Known Vulnerabilities