Lucene search
+L

46 matches found

Friends Of PHP
Friends Of PHP
•added 2020/12/31 7:20 p.m.•77 views

XSS Vulnerability in HTML Writer

This is: - X a bugfix - a new feature Checklist: - X Changes are covered by unit tests - X Code style is respected - X Commit message explains why the change is made see https://github.com/erlang/otp/wiki/Writing-good-commit-messages - X CHANGELOG.md contains a short summary of the change -...

7.1CVSS6.7AI score0.01317EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2020/12/09 5:15 p.m.•32 views

CVE-2020-7776

This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where user comments are concatenated as part of link and this is...

7.1CVSS6.6AI score0.01317EPSS
SaveExploits1References3
Mend
Mend
•added 2020/12/09 4:45 p.m.•1 views

CVE-2020-7776

This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where user comments are concatenated as part of link and this is...

7.1CVSS0.01317EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•15 views

PT-2020-19785 · Phpoffice · Phpspreadsheet

Name of the Vulnerable Software and Affected Versions: phpoffice/phpspreadsheet versions 0.0.0 and earlier Description: The library is vulnerable to XSS when creating an HTML output from an Excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where us...

7.1CVSS5.9AI score0.01317EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/09 12:00 a.m.•4 views

CVE-2020-7776: Improper Neutralization of Input During Web Page Generation

This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where user comments are concatenated as part of link and this is...

7.1CVSS5.7AI score0.01317EPSS
SaveExploits1References2
Snyk
Snyk
•added 2020/11/19 12:56 p.m.•4 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS. The library is vulnerable to XSS when creating an html output from an excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where user comments are concatenated as...

7.1CVSS6AI score0.01317EPSS
SaveExploits1References2
Rows per page
Query Builder