Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend prior to 7.6.2-rev59, 7.8.0 prior to 7.8.0-rev38, 7.8.2 prior to 7.8.2-rev8; AppSuite frontend prior to 7.6.2-rev47, 7.8.0 prior to 7.8.0-rev30, and 7.8.2 prior to 7.8.2-rev8; Office Web prior to 7.6.2-rev16, 7.8.0 prior to 7.8.0-rev10, and 7.8.2 prior to 7.8.2-rev5; and Documentconverter-API prior to 7.8.2-rev5 allows remote malicious users to inject arbitrary web script or HTML.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
open-xchange open-xchange appsuite frontend 7.6.2 |
||
open-xchange open-xchange appsuite backend 7.8.0 |
||
open-xchange open-xchange appsuite backend 7.8.2 |
||
open-xchange open-xchange appsuite backend 7.6.2 |
||
open-xchange office web 7.8.0 |
||
open-xchange open-xchange appsuite frontend 7.8.0 |
||
open-xchange documentconverter-api 7.8.2 |
||
open-xchange office web 7.8.2 |
||
open-xchange office web 7.6.2 |
||
open-xchange open-xchange appsuite frontend 7.8.2 |
Vulmon