Vendor

PHPOffice

35 known vulnerabilities.

Products

PhpSpreadsheet 32 PHPPresentation 2 Math 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.1

CVE-2025-22131 Public exploit

Cross-Site Scripting (XSS) vulnerability in generateNavigation() function

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.

PHPOffice PhpSpreadsheet phpoffice/phpspreadsheet phpoffice/phpexcel Packagist

Jan 20, 2025