PPHPOffice

Products

Exploited and recent CVEs

• CVE-2026-108357 High 8.8 PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service 0.5%
• CVE-2026-108359 High 8.7 PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS) 0.7%
• CVE-2026-108358 High 8.8 PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service 0.6%
• CVE-2026-108360 Medium 6.4 PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading 0.3%
• CVE-2026-114404 Medium 6.1 PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions 0.3%
• CVE-2026-114403 High 8.1 PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load 0.7%
• CVE-2026-59932 High 7.5 PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion 0.5%
• CVE-2026-59933 High 7.5 PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion 0.5%
• CVE-2026-59931 High 7.7 PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist 0.5%
• CVE-2026-45034 Critical 9.2 PhpSpreadsheet: File::prohibitWrappers bypass 0.5%
• CVE-2026-40863 High 7.5 PhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader 0.4%
• CVE-2026-40902 High 7.5 PhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions 0.4%
• CVE-2026-40296 Medium 5.4 PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes 0.2%
• CVE-2026-35453 Medium 4.8 PhpSpreadsheet XSS via number format text substitution in HTML Writer 0.2%
• CVE-2026-34084 Critical 9.2 PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load 0.7%
• CVE-2025-54370 High 8.7 PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser 0.8%
• CVE-2025-48882 High 8.7 PHPOffice Math allows XXE when processing an XML file in the MathML format 0.5%
• CVE-2025-23210 Medium 4.8 Bypass XSS sanitizer using the javascript protocol and special characters in phpoffice/phpspreadsheet 0.4%
• CVE-2025-22131 Medium 5.1 Cross-Site Scripting (XSS) vulnerability in generateNavigation() function 0.4%
• CVE-2024-56412 Medium 4.8 PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters 0.4%
• CVE-2024-56411 Medium 4.8 PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header 0.4%
• CVE-2024-56410 Medium 4.8 PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability in custom properties 0.3%
• CVE-2024-56409 High 8.3 PhpSpreadsheet vulnerable to unauthorized reflected XSS in Currency.php file 0.3%
• CVE-2024-56366 High 8.3 PhpSpreadsheet vulnerable to unauthorized reflected XSS in the Accounting.php file 0.3%
• CVE-2024-56365 High 8.3 PhpSpreadsheet vulnerable to unauthorized reflected XSS in the constructor of the Downloader class 0.3%
• CVE-2024-56408 High 8.3 PhpSpreadsheet allows unauthorized reflected XSS in `Convert-Online.php` file 0.4%
• CVE-2024-48917 High 7.5 XXE in PHPSpreadsheet's XLSX reader 0.7%
• CVE-2024-47873 High 7.5 PhpSpreadsheet XmlScanner bypass leads to XXE 0.8%
• CVE-2024-45060 High 7.1 Unauthenticated Cross-Site-Scripting (XSS) in sample file in PHPSpreadsheet 0.5%
• CVE-2024-45290 High 7.7 Path traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet 0.6%