CVE-2025-63260

MEDIUM NVD

CVSS Score 5.4

Severity MEDIUM

Published Mar 20, 2026

Vendor unknown

Description

SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.