Description
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.
Medium · 5.4
CVE-2025-63260
EUVD-2025-208909GHSA-33x6-3h2c-p4c7
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.
Published Mar 20, 2026 · Updated Jul 5, 2026 · Assigned by mitre