Security Advisory
CVE-2025-68935
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.