CVE-2021-23928: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string...