Vulnerability index

Browse CVEs

25 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Phpspreadsheet HIGH 7.5
CVE-2026-40863

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the SpreadsheetML …

Fix: 1.30.4 / 2.1.16+
Fix from $1,950 2026-05-12
Phpspreadsheet HIGH 7.5
CVE-2026-40902

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the XLSX reader's …

Fix: 1.30.4 / 2.1.16+
Fix from $1,950 2026-05-12
Phpspreadsheet MEDIUM 5.4
CVE-2026-40296

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatt…

Fix: 1.30.4 / 2.1.16+
Fix from $1,600 2026-05-06
Phpspreadsheet MEDIUM 5.4
CVE-2026-35453

PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, 2.2.0 through 2.4.4, 3.3…

Fix: 1.30.4 / 2.1.16+
Fix from $1,600 2026-05-05
Phpspreadsheet CRITICAL 9.8
CVE-2026-34084

PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3…

Fix: 1.30.3 / 2.1.15+
Fix from $2,300 2026-05-05
Phpspreadsheet MEDIUM 6.1
CVE-2025-22131

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the …

Fix: 1.29.8 / 2.1.7+
Fix from $1,600 2025-01-20
Phpspreadsheet MEDIUM 5.4
CVE-2024-56411

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site script…

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet MEDIUM 5.4
CVE-2024-56412

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to bypass…

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet MEDIUM 5.4
CVE-2024-56410

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site script…

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet MEDIUM 5.4
CVE-2024-56365

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauth…

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet MEDIUM 5.4
CVE-2024-56366

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauth…

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet MEDIUM 5.4
CVE-2024-56409

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauth…

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet MEDIUM 5.4
CVE-2024-56408

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have no sanitization in …

Fix: 1.29.7 / 2.1.6+
Fix from $1,600 2025-01-03
Phpspreadsheet HIGH 7.5
CVE-2024-48917

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The `XmlScanner` class has a scan method which should prevent XXE attacks.…

Fix: 1.29.4 / 2.1.3+
Fix from $1,950 2024-11-18
Phpspreadsheet HIGH 7.5
CVE-2024-47873

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The XmlScanner class has a scan method which should prevent XXE attacks. H…

Fix: 1.29.4 / 2.1.3+
Fix from $1,950 2024-11-18
Phpspreadsheet HIGH 8.8
CVE-2024-45291

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links im…

Fix: 1.29.2 / 2.1.1+
Fix from $1,950 2024-10-07
Phpspreadsheet HIGH 7.5
CVE-2024-45290

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links m…

Fix: 1.29.2 / 2.1.1+
Fix from $1,950 2024-10-07
Phpspreadsheet MEDIUM 6.1
CVE-2024-45060

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsheet is susceptible to a cross…

Fix: 1.29.2 / 2.1.1+
Fix from $1,600 2024-10-07
Phpspreadsheet HIGH 7.5
CVE-2024-45293

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks in the XL…

Fix: 1.29.1 / 2.1.1+
Fix from $1,950 2024-10-07
Phpspreadsheet MEDIUM 5.4
CVE-2024-45292

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. `\PhpOffice\PhpSpreadsheet\Writer\Html` does not sanitize "javascript…

Fix: 1.29.2 / 2.1.1+
Fix from $1,600 2024-10-07
Phpspreadsheet MEDIUM 6.5
CVE-2024-45048

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows…

Fix: 1.29.1 / 2.2.1+
Fix from $1,600 2024-08-28
Phpspreadsheet MEDIUM 5.4
CVE-2024-45046

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpreadsheet\Writer\Html` doesn't …

Fix: 1.29.1 / 2.1.0+
Fix from $1,600 2024-08-28
Phpspreadsheet MEDIUM 6.4
CVE-2020-7776

This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by add…

Fix: 1.16.0+
Fix from $1,600 2020-12-09
Phpspreadsheet HIGH 8.8
CVE-2019-12331

PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is …

Fix: 1.8.0+
Fix from $1,950 2019-11-07
Phpspreadsheet HIGH 8.8
CVE-2018-19277EPSS 8%

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

Fix: after 1.5.0
Fix from $1,950 2018-11-14