Package · Packagist

phpoffice/phpexcel

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.1

CVE-2025-22131 Public exploit

Cross-Site Scripting (XSS) vulnerability in generateNavigation() function

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.

PHPOffice PhpSpreadsheet phpoffice/phpspreadsheet phpoffice/phpexcel Packagist

Jan 20, 2025
High 8.8

CVE-2018-19277 Public exploit

XXE in PHPSpreadsheet due to encoding issue

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

phpoffice/phpspreadsheet phpoffice/phpexcel Packagist

Nov 14, 2018