CVE-2018-7201: ProjectSend

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.

Affected products

• ProjectSend ProjectSend: before 1053 (fixed in 1053)

Published 2019-05-22. Last modified 2026-06-17.