Approved changes feed: RSS · Atom

cpe:2.3:a:shuchkin:simplexlsx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorShuchkin (8198d12b-5f5b-58f4-8afe-3416777435cd)
ProductSimplexlsx (9eb45bf3-3e4f-5bde-95e7-a6621e4a1304)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-56364 vulnerable 2026-06-08 06:54:17.783348 Cross-site Scripting vulnerability in SimpleXLSXEx::readThemeColors, SimpleXLSXEx::getColorValue and SimpleXLSX::toHTMLEx
MEDIUM (5.4)
SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. This vulnerability is fixed in 1.1.13.
Published: 2024-12-23T15:52:06.327Z
Updated: 2024-12-28T00:48:18.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55878 vulnerable 2026-06-08 06:54:17.186848 Cross-site Scripting vulnerability in SimpleXLSXEx::readXfs and SimpeXLSX::toHTMLEx
MEDIUM (6.8)
SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don't use direct publication via toHTMLEx.
Published: 2024-12-12T19:20:02.061Z
Updated: 2024-12-13T15:57:54.961Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.