medium6.4
CVE-2025-68917
ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form.
Impact
ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.
Affected products
| Product | Affected versions |
|---|---|
| ONLYOFFICE Docs | before 9.2.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.