CVE-2014-8993

Open-Xchange AppSuite has a backend XSS vulnerability (CVE-2014-8993) triggered by a crafted XHTML file with the application/xhtml+xml MIME type. Affected versions: 7.4.2-rev40 and earlier in the 7.4 line, 7.6.0-rev32 and earlier in the 7.6.0 line, and 7.6.1-rev11 and earlier in the 7.6.1 line. T...