CWE-79

CVE-2021-23928

February 23, 2023 by

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.

February 23, 2023 by

OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/?delivery=view URI.

February 23, 2023 by

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile.

February 23, 2023 by

OX App Suite through 7.10.4 allows XSS via an inline binary file.

February 23, 2023 by

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename.

February 23, 2023 by

OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL.