CVE-2025-22131 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file i…
Medium CVSS: 5.1

CVE-2025-22131

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.
Vendor
Phpoffice
Product
Phpspreadsheet
CWE
CWE-79
Yayın Tarihi
2025-01-20 16:15:27
Güncelleme
2025-03-06 14:01:10
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Phpspreadsheet MEDIUM Phpoffice 2025

Referanslar

https://github.com/PHPOffice/PhpSpreadsheet/commit/4088381ccfaf241d7d42c333de0dc8c98e338743 https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-79xx-vf93-p7cx