Skip to main content

Exceljs

1 CVEs product

Monthly

CVE-2018-16459 npm MEDIUM POC PATCH This Month

An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Exceljs
NVD
CVSS 3.0
6.1
EPSS
0.8%
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Exceljs
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy