Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-22131

Cross-Site Scripting (XSS) vulnerability in generateNavigation() function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHPOffice PhpSpreadsheet

  • >= 3.0.0, < 3.8.0affected
  • >= 2.2.0, < 2.3.6affected
  • >= 2.0.0, < 2.1.7affected
  • < 1.29.8affected

References