ONLYOFFICE ONLYOFFICE Docs

• CVE-2025-6380 Critical 9.8 ONLYOFFICE Docs 1.1.0 - 2.2.0 - Missing Authorization to Unauthenticated Privilege Escalation via callback Function 0.9%
• CVE-2024-11450 Medium 6.4 ONLYOFFICE Docs <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%