Composer/Shuchkin/Simplexlsx | GitLab Advisory Database

Cross-site Scripting vulnerability in SimpleXLSXEx::readXfs and SimpeXLSX::toHTMLEx

When calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code.