Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows malicious cross site scripting payloads to be used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ONLYOFFICE 跨站脚本漏洞
Vulnerability Description
Ascensio System ONLYOFFICE是拉脱维亚Ascensio System公司的一款办公软件。 ONLYOFFICE 2021-11-08 之前的所有版本存在安全漏洞，该漏洞源于易受跨站点脚本 (XSS) 攻击。文档编辑器的“macros”功能允许使用恶意跨站点脚本负载。
CVSS Information
N/A
Vulnerability Type
N/A