x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting

Description

All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.

Recommendation

No fix is available yet. Followings are affected versions:

<= 1.1.9

References

Could your website be exposed too?

SmartScanner can check your website for x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting and gives you actionable findings to investigate.

Start a free scan

Related Issues

Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users - CVE-2022-25929
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details - CVE-2022-39350
node-red-dashboard vulnerable to Cross-site Scripting - CVE-2022-3783
Joplin Desktop App vulnerable to Cross-site Scripting - CVE-2022-45598

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated January 27, 2023