Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90754)

Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange (Open-xchange), a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited by attackers to execute malicious script code via JavaScript code snippets in shared XCF files.