CVE-2024-56364

Name of the Vulnerable Software and Affected Versions: SimpleXLSX versions 1.0.12 through 1.1.13

Description: The issue is related to the execution of arbitrary JavaScript code when calling the extended toHTMLEx method in SimpleXLSX. This can allow a remote attacker to execute arbitrary JavaScript code. The vulnerability is associated with the lack of protection measures for the web page structure.

Recommendations: For SimpleXLSX versions 1.0.12 through 1.1.12, update to version 1.1.13 to resolve the issue. As a temporary workaround, consider avoiding the use of the toHTMLEx method until the issue is resolved. Do not use data publication via toHTMLEx until the issue is resolved.