npm›exceljs›CVE-2018-164596.1 MEDIUMCross-site ScriptingAn unescaped payload in exceljs allows a possible XSS via cell value when worksheet is displayed in browser.