CVE-2025-22131

This PoC generates a malicious Excel file (exploit.xlsx) by embedding user-provided HTML/JavaScript into the workbook.xml file of a sample spreadsheet. The exploit leverages CVE-2025-22131, an XSS vulnerability, by replacing a sheet name with the injected payload.

This PoC demonstrates an XSS vulnerability in PhpSpreadsheet where unsanitized sheet names in XLSX files can inject malicious HTML. The exploit modifies the workbook.xml file to include an XSS payload that exfiltrates cookies to an attacker-controlled URL.