CVE-2021-23928

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string...

CVE-2021-23928

OX App Suite up to 7.10.3 is affected by a cross-site scripting vulnerability via the ajax/apps/manifests query string. The description in multiple sources states XSS can be triggered through that parameter, enabling script execution in the victim’s browser. CVSS data in the sources show MEDIUM s...