Lucene search
Veracode Vulnerability DatabaseVERACODE:28527HistoryDec 10, 2020 - 3:16 a.m.
Cross-site Scripting (XSS)
2020-12-1003:16:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.001 Low
EPSS
Percentile
26.6%
phpoffice/phpspreadsheet is vulnerable to cross-site scripting (XSS). The vulnerability exists when creating a HTML output using an excel cell, through a comment on any cell, as the comments gets concatenated as part of the link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpoffice/phpspreadsheet | le | 1.15.0 |
Related
nvd
nvd
CVE-2020-7776
2020-12-09 17:15:31
cve
cve
CVE-2020-7776
2020-12-09 17:15:31
osv
osv
Cross-site scripting in phpoffice/phpspreadsheet
2021-05-06 18:53:37
CVE-2020-7776
2020-12-09 17:15:31
cvelist
cvelist
CVE-2020-7776 Cross-site Scripting (XSS)
2020-12-09 00:00:00
friendsofphp
friendsofphp
XSS Vulnerability in HTML Writer
2020-12-31 19:20:00
prion
prion
Design/Logic Flaw
2020-12-09 17:15:00
github
github
Cross-site scripting in phpoffice/phpspreadsheet
2021-05-06 18:53:37