Description CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel. Remediation References CVE-2018-7201 Related Vulnerabilities WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Cross-Site Scripting (1.7.0.10) Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14169) MySQL CVE-2017-3244 Vulnerability (CVE-2017-3244) ZenCart Improper Input Validation Vulnerability (CVE-2009-4321) MySQL CVE-2016-0599 Vulnerability (CVE-2016-0599) Severity High Classification CVE-2018-7201 CWE-1236 Tags Missing Update Known Vulnerabilities