CVE-2016-6843

Open-Xchange OX App Suite before 7.8.2-rev8 is affected. When adding contacts to a group via autocomplete, script code can be injected and executed in the context of the user creating or changing the group, potentially leading to session hijacking or unwanted actions in the web interface (e.g., s...