[MEDIUM] PhpSpreadsheet allows bypass XSS sanitizer using the javascript protocol and special characters

PKSA-5bk7-32wt-w1f6 CVE-2024-56412 GHSA-q9jv-mm3r-j47r

Affected package: phpoffice/phpexcel

Affected version: <=1.8.2

Reported by:
GitHub