Read the docs
TI-2026-18359 Aliases CVE-2026-22867

LaSuite Doc affected by Stored XSS via Interlinking Block

Priority LOW 39CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 3.8.0 to 4.3.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Interlinking feature. When a user creates a link to another document within the editor, the URL of that link is not validated. An attacker with document editing privileges can inject a malicious javascript: URL that executes arbitrary code when other users click on the link. This vulnerability is fixed in 4.4.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00298 22nd percentileScored 2026-11-07
Fix Fixed docs (suitenumerique): 4.4.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
suitenumeriquedocs3.8.0 to before 4.4.04.4.0Patch availableCNA
  • docs Vendorsuitenumerique Affected 3.8.0 to before 4.4.0 Fixed in 4.4.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lasuite:docs:*:*:*:*:*:*:*:*3.8.0 to before 4.3.0VulnerableLasuite
  • cpe:2.3:a:lasuite:docs:*:*:*:*:*:*:*:* Versions 3.8.0 to before 4.3.0 Vulnerable ·Lasuite

Remediation

  • Fix · CNA docs (suitenumerique) Fixed in 4.4.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-22867

References

Patch 1

Advisory 1

Other 1

  • TI-2026-62539 Docs before 5.4.1 Stale Collaboration Session After Access Revocation CVSS 4.0HIGH 7.6
  • TI-2026-30507 People: Privilege Escalation via Missing Role Ceiling in Mail Domain Invitation CVSS 3.1MEDIUM 5.5
  • TI-2026-03229 suitenumerique messages ThreadAccess serializers.py ThreadAccessSerializer improper authentication CVSS 4.0MEDIUM 5.3
  • TI-2026-61870 Docs through 5.6.1 SSRF via Unauthenticated cors-proxy Endpoint CVSS 4.0MEDIUM 6.9
  • TI-2026-53731 LaSuite Doc: Public Documents Enumeration CVSS 3.1MEDIUM 6.5
  • TI-2026-74953 Authorization bypass in La Suite Docs lets users comment on other threads CVSS 4.0LOW 2.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences