Exceljs Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Exceljs Project records in CISA KEV

No Exceljs Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Exceljs · all components

TI-2018-11801 CVE-2018-16459 · GHSA-2j2j-8rrv-264g

LOW 29

An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00759 Published 2018-09-06 Fixed in 1.6.0 CWE-79