Arbitrary Code Execution

metacalc is vulnerable to arbitrary code execution. The vulnerability exists in sheet.js due to lack of validation in Math class which allows an attacker to inject and execute arbitrary code...