Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
added 2024/10/07 2:43 p.m.28 views

PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file

Summary One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting XSS vulnerability due to improper handling of input where a number is expected leading to formula injection. Details The following code in 45Quadraticequationsolver.php concatenates the user supplied...

7.1CVSS6AI score0.00478EPSS
SaveExploits1References7Affected Software2
Rows per page
Query Builder