CVE-2013-7143

Open-Xchange AppSuite (OX App Suite) 7.4.1 and earlier is affected by CVE-2013-7143 due to HTML/JavaScript injection in the mail filter rule title, enabling stored XSS. The root cause is embedding script tags in the title field, which can be executed in a user’s context. Advisory indicates vulner...