CVE-2021-44208

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

CVE-2021-44208

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

CVE-2021-44208

OX App Suite 7.10.5 contains a Cross-Site Scripting (XSS) vulnerability in the Chat component, where system messages deemed unknown are not escaped, enabling potential script execution within a victim’s browser context. The vulnerability affects the frontend for OX App Suite versions 7.10.5, with...

OX App Suite 7.10.5 Cross Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: OXUIB-1092 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.5-rev26 Vendor notification:...