CVE-2013-6908

Cybozu Garoon 3.x prior to 3.7.0 contains a cross‑site scripting (XSS) vulnerability in the mail component that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Exploitation status is not detailed in the provided documents. Affected product versions are Garo...