4 matches found
CVE-2021-23935
OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code...
6.1CVSS5.8AI score0.01076EPSS
SaveExploits0References1
CVE-2021-23935
OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code...
6.1CVSS6.3AI score0.01076EPSS
SaveExploits0References2
CVE-2021-23935
OX App Suite (up to 7.10.4) contains a cross-site scripting (XSS) vulnerability exploited by placing JavaScript code in the location field of an appointment. This can lead to injected scripts being executed in a victim’s browser. Public details confirm the flaw and affected version; no patch/work...
6.1CVSS5.9AI score0.01076EPSS
SaveExploits0References1Affected Software1
20