Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7408
HistorySep 03, 2018 - 7:23 a.m.

Cross-site Scripting (XSS)

2018-09-0307:23:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

37.3%

exceljs is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the cells in the table, allowing a malicious user to inject and execute arbitrary Javascript.

CPENameOperatorVersion
exceljsle1.5.1
exceljseq0.2.8

0.001 Low

EPSS

Percentile

37.3%