Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the generateNavigation function, which translates the XLSX file into an HTML representation and displays it in the response without proper sanitization for the sheet's title. Remediation There is no fixed...

CVE-2021-24441 Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...