4 matches found
CVE-2017-6913
CVE-2017-6913 This is a vulnerability I found in open-xchange OX App Suite's webmail https://www.open-xchange.com/ a while back. Vulnerability details The webmail was vulnerable to a stored XSS when opening an email, due to the event attributes of the HTML time tag not being properly filtered...
CVE-2017-6913
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
CVE-2017-6913
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
Cross site scripting
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...