Igor Sak-Sakovskiy

The issue is related to a bypass of the Cross-site Scripting (XSS) sanitizer in phpoffice/phpspreadsheet, a pure PHP library for reading and writing spreadsheet files. This bypass is achieved using the javascript protocol and special characters. An attacker can use special characters to generate an HTML link that, when clicked, executes arbitrary JavaScript code in the browser. The vulnerable component is the `PhpOfficePhpSpreadsheetWriterHtml` class, specifically the `generateRow` method. The exploitation conditions involve a user viewing a specially generated XML file.

Name of the Vulnerable Software and Affected Versions: XMB versions prior to 1.9.11.16 XMB versions prior to 1.9.12.03 Description: The issue is related to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This allows for potential malicious script execution. Recommendations: For versions prior to 1.9.11.16, update to version 1.9.11.16. For versions prior to 1.9.12.03, update to version 1.9.12.03.

The issue allows a remote attacker to inject arbitrary JavaScript in a message using nested markdown tags, leading to persistent cross-site scripting (XSS). This flaw can result in arbitrary file read and remote code execution (RCE) on the Rocket.Chat desktop app.

Name of the Vulnerable Software and Affected Versions: PunBB versions prior to 1.4.6 Description: An issue was discovered in the [email] BBcode tag, allowing an XSS vulnerability that enables injecting arbitrary JavaScript into any forum message with authentication. Recommendations: For PunBB versions prior to 1.4.6, update to version 1.4.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of the [email] BBcode tag until a patch is available.

The issue allows stored XSS via nested [email] tags with MyCode (aka BBCode).

The issue is related to Stored XSS, which can lead to Remote Code Execution.

The issue allows remote attackers to inject arbitrary JavaScript code into any message on the forum via multiple stored XSS.