medium5.4
CVE-2022-25646
All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.
Impact
All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X-Data-Spreadsheet Project | X-Data-Spreadsheet | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/myliang/x-spreadsheet/issues/580
- https://security.snyk.io/vuln/SNYK-JS-XDATASPREADSHEET-2430381
- https://youtu.be/Ij-8VVKNh7U
- https://github.com/myliang/x-spreadsheet/issues/580
- https://security.snyk.io/vuln/SNYK-JS-XDATASPREADSHEET-2430381
- https://youtu.be/Ij-8VVKNh7U