← All advisories

Medium severity6.4NVD Advisory· Published Dec 24, 2025· Updated Apr 15, 2026

CVE-2025-68917

CVE-2025-68917

Description

ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

CVEProject/Docsllm-fuzzy
Range: <9.2.1

Patches

Vulnerability mechanics

References

1

github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.mdnvd

News mentions

0

No linked articles in our index yet.