CVE-2024-56408 | PHPOffice PhpSpreadsheet up to 1.29.6/2.1.5/2.3.4/3.6.x Convert-Online.php cross site scripting (GHSA-x88g-h956-m5xg)

A vulnerability classified as problematic was found in PHPOffice PhpSpreadsheet up to 1.29.6/2.1.5/2.3.4/3.6.x. Affected by this vulnerability is an unknown functionality of the file /vendor/phpoffice/phpspreadsheet/samples/Engineering/Convert-Online.php. The manipulation leads to cross site scripting.

This vulnerability is known as CVE-2024-56408. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.