1 matches found
PhpSpreadsheet allows unauthorized Reflected XSS in the Accounting.php file
Unauthorized Reflected XSS in the Accounting.php file Product: Phpspreadsheet Version: version 3.6.0 CWE-ID: CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS vector v.3.1: 8.2 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N CVSS vector v.4.0: 8.3...
8.3CVSS5.5AI score0.00331EPSS
SaveExploits1References4Affected Software2
20