medium5.4
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.
Impact
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Syncfusion | Syncfusion | Version 30.1.37 |