Tag
#xss
WordPress WP Event Manager plugin version 3.1.44 suffers from a cross site scripting vulnerability.
### Summary `\PhpOffice\PhpSpreadsheet\Writer\Html` doesn't sanitize spreadsheet styling information such as font names, allowing an attacker to inject arbitrary JavaScript on the page. ### PoC Example target script: ``` <?php require 'vendor/autoload.php'; $reader = \PhpOffice\PhpSpreadsheet\IOFactory::createReader("Xlsx"); $spreadsheet = $reader->load(__DIR__ . '/book.xlsx'); $writer = new \PhpOffice\PhpSpreadsheet\Writer\Html($spreadsheet); print($writer->generateHTMLAll()); ``` Save this file in the same directory: [book.xlsx](https://github.com/PHPOffice/PhpSpreadsheet/files/15212797/book.xlsx) Open index.php in a web browser. An alert should be displayed. ### Impact Full takeover of the session of users viewing spreadsheet files as HTML.
vTiger CRM version 7.4.0 suffers from multiple reflective cross site scripting vulnerabilities.
Gitea version 1.22.0 suffers from a cross site scripting vulnerability.
Notemark versions 0.13.0 and below suffer from a cross site scripting vulnerability.
Online Graduate Tracer System version 1.0.0 suffers from an insecure direct object reference vulnerability.
Online Appointment System version 1.0 suffers from an ignored default credential vulnerability.
Multi-Vendor Online Groceries Management System version 1.0 suffers from an ignored default credential vulnerability.
MSMS-PHP version 1.0 suffers from an ignored default credential vulnerability.