medium6.4
CVE-2025-68935
ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window.
Impact
ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onlyoffice | Document Server | before 9.2.1 |