CVE-2022-47412 – ONLYOFFICE Workspace Search Stored XSS

https://notcve.org/view.php?id=CVE-2022-47412

07 Feb 2023 — Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition. • https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#733 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •