CVE-2024-29273

The collaborative office suite dzzoffice version 2.02.1 SC UTF8 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a lack of effective filtering and escaping of user-supplied data, specifically allowing an attacker to inject a crafted SVG document containing an XSS payload int...