medium6.4
CVE-2025-68936
ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name.
Impact
ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onlyoffice | Document Server | before 9.2.1 |