Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 35
Reset filtersPhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Kimai has an XXE Leading to Local File Read
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
XXE in PHPSpreadsheet encoding is returned
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
drupal/loft_data_grids - SA-CONTRIB-2021-043
Cross-site scripting in phpoffice/phpspreadsheet
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
XXE in PHPSpreadsheet due to encoding issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.