Количество 3
Количество 3
CVE-2025-23210
phpoffice/phpspreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions have been found to have a Bypass of the Cross-site Scripting (XSS) sanitizer using the javascript protocol and special characters. This issue has been addressed in versions 3.9.0, 2.3.7, 2.1.8, and 1.29.9. Users are advised to upgrade. There are no known workarounds for this vulnerability.
GHSA-r57h-547h-w24f
PhpSpreadsheet allows bypassing of XSS sanitizer using the javascript protocol and special characters
BDU:2025-13241
Уязвимость PHP-библиотеки PhpSpreadsheet, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный JavaScript-код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-23210 phpoffice/phpspreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions have been found to have a Bypass of the Cross-site Scripting (XSS) sanitizer using the javascript protocol and special characters. This issue has been addressed in versions 3.9.0, 2.3.7, 2.1.8, and 1.29.9. Users are advised to upgrade. There are no known workarounds for this vulnerability. | 0% Низкий | около 1 года назад | |
| GHSA-r57h-547h-w24f PhpSpreadsheet allows bypassing of XSS sanitizer using the javascript protocol and special characters | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | BDU:2025-13241 Уязвимость PHP-библиотеки PhpSpreadsheet, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный JavaScript-код | CVSS3: 6.4 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу