The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.