OX App Suite before frontend 7.10.6-rev24 allows XSS via data to the Tumblr portal widget, such as a post title.
2023-05-29T03:15:09.717
2024-11-21T07:48:13.183
Modified
CVSSv3.1: 6.1 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | open-xchange | ox_app_suite | < 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |
| Application | open-xchange | ox_app_suite | 7.10.6 | Yes |