5.4 Medium

CVE-2022-25646 All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of…

Description

All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.

Affected products and versions

Product	Affected versions	Fixed in
x-data-spreadsheet	Versions not published

Do you use x-data-spreadsheet?

Track this CVE Watch x-data-spreadsheet Check my SBOMs

www.cveye.io/en/cve/CVE-2022-25646

Timeline

Published August 30, 2022
Last modified September 16, 2024

References

security.snyk.io security.snyk.io
github.com github.com
youtu.be youtu.be

Track this CVE