Cross site scripting

2022-04-0812:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.7%

JSON

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

CPENameOperatorVersion
document_serverlt7.0.0

CPE	Name	Operator	Version
	document_server	lt	7.0.0

References

github.com/ONLYOFFICE/document-server-integration/issues/252

github.com/ONLYOFFICE/DocumentServer

www.onlyoffice.com/

0.001 Low

EPSS

Percentile

45.7%

JSON

Related for PRION:CVE-2022-24229