Description CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel. Remediation References CVE-2018-7201 Related Vulnerabilities Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42110) WordPress Plugin Responsive WordPress Timeline-Everest Timeline Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.1) Osclass Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10751) Chamilo Improper Input Validation Vulnerability (CVE-2021-31933) Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.2) Severity High Tags Missing Update Known Vulnerabilities CWE-1236 CVE-2018-7201