CVE-2022-25646

All versions of x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into cells. The vulnerability enables injection and execution of malicious JavaScript in the browser when cell values are rendered. Public sources in the connected set (V...