CVE-2013-6902

This CVE affects Cybozu Garoon up to version 3.7.0, where the Space function is vulnerable to Cross-site Scripting (XSS). The root cause is unspecified vectors allowing remote attackers to inject arbitrary script/HTML, potentially executing in a user’s browser. Public sources (NVD/JVN) confirm mu...