https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T17:59:48.712472+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06823 bdu:2025-06823 2026-10-10T17:59:48.715232+00:00 bdu:2025-06823 https://cve.radiocsirt.org/vuln/euvd-2026-245036 EUVD-2026-245036 2026-10-10T17:59:48.715264+00:00 EUVD-2026-245036 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5301 fkie_cve-2025-5301 2026-10-10T17:59:48.715278+00:00

ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server's HTML response.

 https://cve.radiocsirt.org/vuln/ghsa-r5fg-8fjv-3w9h GHSA-r5fg-8fjv-3w9h 2026-10-10T17:59:48.715306+00:00

ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server's HTML response.