| Package | Affected versions | Patched versions |
|---|---|---|
| document server | < 9.2.1 | 9.2.1 |
ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free