Phpoffice vulnerabilities
35 CVEs and advisories name Phpoffice as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-45291Path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet
- CVE-2024-45292PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks
- CVE-2024-45293XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader
- CVE-2024-45046PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
- CVE-2024-45048XML External Entity Reference (XXE) in PHPSpreadsheet