CVE-2026-40296
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
5.4 / 10
Vulnerability Description
PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
composer
Product
phpoffice/phpspreadsheet
Discussion (0)
Add Comment
No comments yet. Be the first!