Description
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows malicious cross site scripting payloads to be used.
Medium · 6.1
CVE-2021-43446
EUVD-2021-30379GHSA-5w4f-g47c-43mg
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows ma…
Published Jan 23, 2023 · Updated Apr 2, 2025 · Assigned by mitre