description: An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
problem types: Cross-site Scripting (XSS) - Generic (CWE-79)
affected:
{
product: exceljs
vendor: https://github.com/guyonroche
versions:
status: affected, version: 1.6.0
}