CVE-2013-6907

CVE-2013-6907 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon mail component affecting Garoon 2.x and 3.x prior to 3.7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in an affected user’...