Lucene search

K
osvGoogleOSV:CVE-2021-43446
HistoryJan 23, 2023 - 3:15 p.m.

CVE-2021-43446

2023-01-2315:15:13
Google
osv.dev
3
onlyoffice
cross site scripting
document editor
malicious payloads

EPSS

0.001

Percentile

35.4%

ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The “macros” feature of the document editor allows malicious cross site scripting payloads to be used.

EPSS

0.001

Percentile

35.4%

Related for OSV:CVE-2021-43446