CVE-2021-41824

Description

Craft CMS before 3.7.14 allows CSV injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28 ↗
• https://twitter.com/craftcmsupdates/status/1442928690145366018 ↗
• https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq ↗