Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite prior to 7.6.3-rev31, 7.8.x prior to 7.8.2-rev31, 7.8.3 prior to 7.8.3-rev41, and 7.8.4 prior to 7.8.4-rev28 allows remote malicious users to inject arbitrary web script or HTML via the data-target attribute in an HTML page with data-toggle gadgets.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
open-xchange open-xchange appsuite |
||
open-xchange open-xchange appsuite 7.6.3 |
||
open-xchange open-xchange appsuite 7.8.0 |
||
open-xchange open-xchange appsuite 7.8.2 |
||
open-xchange open-xchange appsuite 7.8.3 |
||
open-xchange open-xchange appsuite 7.8.4 |