EUVD-2026-107324

odf-kit: HTML injection leading to XSS in odtToHtml and odsToHtml via unescaped style attribute values...

npm: odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values

npm: odf-kit: HTML injection leading to XSS in odtToHtml and odsToHtml via unescaped style attribute values vulnerability discovered by ? in WordPress npm odf-kit versions = 0.6.0, 0.14.2...

odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values

Summary ODF style attribute values are interpolated into style="..." attributes without HTML-escaping in both of odf-kit's to-HTML renderers odtToHtml and odsToHtml. A double-quote character inside an attacker-controlled style value breaks out of the attribute, allowing arbitrary HTML/attribute...

npm: odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values

npm: odf-kit has HTML injection leading to XSS in odsToHtml via unescaped style attribute values vulnerability discovered by ? in WordPress npm odf-kit versions = 0.9.8, 0.14.2...

odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values

Summary ODF style values are interpolated into style="..." attributes without HTML-escaping in odf-kit's ODS to-HTML renderer odsToHtml. A double-quote character inside an attacker-controlled style value breaks out of the attribute, allowing arbitrary HTML/attribute injection — and therefore scri...

CVE-2026-113787

odf-kit allows users to generate, fill, read, and convert OpenDocument Format files .odt, .ods in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an escapeHtml helper and applies it consistently to text content and to attribute values — href, src,...

CVE-2026-113787 odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values

odf-kit allows users to generate, fill, read, and convert OpenDocument Format files .odt, .ods in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an escapeHtml helper and applies it consistently to text content and to attribute values — href, src,...

CVE-2026-113787 odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values

odf-kit allows users to generate, fill, read, and convert OpenDocument Format files .odt, .ods in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an escapeHtml helper and applies it consistently to text content and to attribute values — href, src,...

CVE-2026-113787

The odf-kit library, which handles OpenDocument Format files in TypeScript and JavaScript, is vulnerable to HTML injection leading to Cross-site Scripting (XSS) in versions 0.10.0 through 0.14.1 . The root cause is that the renderer fails to escape inline CSS strings in the odtToHtml() function. ...

CVE-2026-113787 odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values

odf-kit allows users to generate, fill, read, and convert OpenDocument Format files .odt, .ods in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an escapeHtml helper and applies it consistently to text content and to attribute values — href, src,...

CVE-2026-113787

odf-kit allows users to generate, fill, read, and convert OpenDocument Format files .odt, .ods in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an "escapeHtml" helper and applies it consistently to text content and to attribute values — "href",...

PT-2026-120658

Name of the Vulnerable Software and Affected Versions odf-kit versions 0.6.0 through 0.14.1 Description The renderer fails to apply the escapeHtml helper to inline CSS strings. In the renderTextSpan function, values such as fo:color are copied verbatim by the extractSpanStyle function and...

GitHubNewbie0 odf-kit cross-site scripting vulnerability

In version 0.10.0 through 0.14.2 of the odf-kit for GitHubNewbie, there is a cross-site scripting vulnerability. This occurs because the HTML renderer fails to escape inline CSS style values; attributes such as fo:color are directly concatenated into the style attribute, potentially enabling...