https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 10:20:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06823 bdu:2025-06823 https://cve.radiocsirt.org/vuln/bdu:2025-06823 https://cve.radiocsirt.org/vuln/euvd-2026-245036 EUVD-2026-245036 https://cve.radiocsirt.org/vuln/euvd-2026-245036 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5301 <p>ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server&#39;s HTML response.</p> <p>ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server&#39;s HTML response.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5301 https://cve.radiocsirt.org/vuln/ghsa-r5fg-8fjv-3w9h <p>ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server&#39;s HTML response.</p> <p>ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server&#39;s HTML response.</p> https://cve.radiocsirt.org/vuln/ghsa-r5fg-8fjv-3w9h