Vulnerabilities in PHPOffice
26 resultsCVE-2024-56409HIGHPhpSpreadsheet vulnerable to unauthorized reflected XSS in Currency.php fileEPSS 0.3%CVE-2024-56410MEDIUMPhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability in custom propertiesEPSS 0.3%CVE-2024-45292MEDIUMPhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinksEPSS 0.3%CVE-2024-56365HIGHPhpSpreadsheet vulnerable to unauthorized reflected XSS in the constructor of the Downloader classEPSS 0.3%CVE-2026-40296MEDIUMPhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codesEPSS 0.2%CVE-2026-35453MEDIUMPhpSpreadsheet XSS via number format text substitution in HTML WriterEPSS 0.2%