CVE-2021-32745

CVE-2021-32745 is a reflected XSS vulnerability in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable when creating the Collabora Online iframe, enabling scripts to run in the iframe context and access a small set of browser-stored user settings and...