CVE-2025-22131 PoC — Cross-Site Scripting (XSS) vulnerability in generateNavigation() function

Source

https://github.com/s0ck37/CVE-2025-22131-POC

Associated Vulnerability

Title: Cross-Site Scripting (XSS) vulnerability in generateNavigation() function (CVE-2025-22131)
Description:PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.

Description

POC for the vuln CVE-2025-22131

Readme

# CVE-2025-22131 POC
## CVE-2025-22131 XSS Exploit by s0ck37

![title](out.png)

Reference: https://sploitus.com/exploit?id=152DAC32-8330-54D6-A916-7FC36EAA38B7

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →