CVE-2022-24229

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript…

published April 8, 2022

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01879 · 79.3th percentile
Published
2022-04-08T11:06Z
EPSS history
Timeline
  • 08 APR 11:06Z
    A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript…
    cvelistv5