← Database

CVE-2022-25646

MEDIUM CVSS: 5.4 Published: 2022-08-30 Modified: 2026-06-17

Description

All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.

Affected Platforms

X-Data-Spreadsheet Project X-Data-Spreadsheet

Weakness Type

CWE-79

References