CVE-2023-37600

Office Suite Premium affected product: Version v10.9.1.42602. Vulnerability: reflected cross-site scripting (XSS) via the id parameter at /api?path=profile. Root cause: input reflected back to output without adequate sanitization (per the provided CVE record and secondary sources). Impact (as des...

CVE-2023-38617

Office Suite Premium v10.9.1.42602 is affected by a reflected cross-site scripting (XSS) vulnerability in the filter parameter of the API endpoint /api?path=files. The issue is documented across multiple sources, with no public exploit details provided in the attached documents. CVSS 3.1 base sco...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 contains a local file inclusion (LFI) vulnerability in the /etc/hosts component. The issue is documented in CVE-2023-37601 with a CVSS v3.1 base score of 7.5 (High) and a network attack vector, no user interaction required, and no confidentiality is impacted bey...