8 matches found
PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
Summary One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting XSS vulnerability due to improper handling of input where a number is expected leading to formula injection. Details The following code in 45Quadraticequationsolver.php concatenates the user supplied...
7.1CVSS6AI score0.00478EPSS
SaveExploits1References7Affected Software2
20