[MEDIUM] PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties

PKSA-4ckb-wpj6-c29d CVE-2024-56410 GHSA-wv23-996v-q229

Affected package: phpoffice/phpspreadsheet

Affected version: >=2.2.0,<=2.3.4|>=2.0.0,<=2.1.5|<=1.29.6|>=3.0.0,<3.7.0

Reported by:
GitHub