CVE-2025-5301

ONLYOFFICE Docs (DocumentServer) versions 8.3.1 and below are vulnerable to a reflected cross-site scripting (XSS) issue. The root cause is the improper sanitization of crafted HTTP POST requests sent via the WOPI protocol . An attacker can inject malicious scripts that are reflected in the serve...

CVE-2024-50859

The ipimportaclcsv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data...

CVE-2018-12651

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter...