CVE-2022-47412 – ONLYOFFICE Workspace Search Stored XSS

https://notcve.org/view.php?id=CVE-2022-47412

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition. • https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#733 https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •