← Database

CVE-2022-24229

MEDIUM CVSS: 6.1 Published: 2022-04-08 Modified: 2026-06-17

Description

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

Affected Platforms

Onlyoffice Document Server

Weakness Type

CWE-79

References