VULNERABILITY INTELLIGENCE
CVE-2024-56364
CVSS score5.4 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-12-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description
SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. This vulnerability is fixed in 1.1.13.
Weakness classification
- security-advisories@github.com: CWE-79