Description (CNA)
An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| https://github.com/guyonroche / exceljs | affected 1.6.0 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.