High severity8.8NVD Advisory· Published Sep 30, 2021· Updated Jun 17, 2026
CVE-2021-41824
CVE-2021-41824
Description
Craft CMS before 3.7.14 allows CSV injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
craftcms/cmsPackagist | >= 3.4.0, < 3.7.14 | 3.7.14 |
Affected products
2- Craft CMS/Craft CMSdescription
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-h7vq-5qgw-jwwqghsaADVISORY
- github.com/craftcms/cms/blob/develop/CHANGELOG.mdnvdRelease NotesThird Party AdvisoryWEB
- github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwqnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-41824ghsaADVISORY
- twitter.com/craftcmsupdates/status/1442928690145366018nvdThird Party AdvisoryWEB
- github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2ghsaWEB
News mentions
0No linked articles in our index yet.