Read the docs
TI-2022-17389 Aliases CVE-2022-37308GHSA-cm9p-43gv-wxfx

OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages.

Priority MEDIUM 60CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-79.

Summary

OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00565 47th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*before 7.10.5VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:-:*:*:*:*:*:*7.10.5VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5961:*:*:*:*:*:*7.10.5 patch_release_5961VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5973:*:*:*:*:*:*7.10.5 patch_release_5973VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5976:*:*:*:*:*:*7.10.5 patch_release_5976VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5982:*:*:*:*:*:*7.10.5 patch_release_5982VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5989:*:*:*:*:*:*7.10.5 patch_release_5989VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5994:*:*:*:*:*:*7.10.5 patch_release_5994VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6000:*:*:*:*:*:*7.10.5 patch_release_6000VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6003:*:*:*:*:*:*7.10.5 patch_release_6003VulnerableOpen-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:* Versions before 7.10.5 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:-:*:*:*:*:*:* Versions 7.10.5 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5961:*:*:*:*:*:* Versions 7.10.5 patch_release_5961 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5973:*:*:*:*:*:* Versions 7.10.5 patch_release_5973 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5976:*:*:*:*:*:* Versions 7.10.5 patch_release_5976 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5982:*:*:*:*:*:* Versions 7.10.5 patch_release_5982 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5989:*:*:*:*:*:* Versions 7.10.5 patch_release_5989 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5994:*:*:*:*:*:* Versions 7.10.5 patch_release_5994 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6000:*:*:*:*:*:* Versions 7.10.5 patch_release_6000 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6003:*:*:*:*:*:* Versions 7.10.5 patch_release_6003 Vulnerable ·Open-Xchange GmbH
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6008:*:*:*:*:*:*7.10.5 patch_release_6008VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6010:*:*:*:*:*:*7.10.5 patch_release_6010VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6016:*:*:*:*:*:*7.10.5 patch_release_6016VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6020:*:*:*:*:*:*7.10.5 patch_release_6020VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6026:*:*:*:*:*:*7.10.5 patch_release_6026VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6029:*:*:*:*:*:*7.10.5 patch_release_6029VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6034:*:*:*:*:*:*7.10.5 patch_release_6034VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6035:*:*:*:*:*:*7.10.5 patch_release_6035VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6038:*:*:*:*:*:*7.10.5 patch_release_6038VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6046:*:*:*:*:*:*7.10.5 patch_release_6046VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6051:*:*:*:*:*:*7.10.5 patch_release_6051VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6053:*:*:*:*:*:*7.10.5 patch_release_6053VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6060:*:*:*:*:*:*7.10.5 patch_release_6060VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6061:*:*:*:*:*:*7.10.5 patch_release_6061VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6066:*:*:*:*:*:*7.10.5 patch_release_6066VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6068:*:*:*:*:*:*7.10.5 patch_release_6068VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6072:*:*:*:*:*:*7.10.5 patch_release_6072VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6079:*:*:*:*:*:*7.10.5 patch_release_6079VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6084:*:*:*:*:*:*7.10.5 patch_release_6084VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6092:*:*:*:*:*:*7.10.5 patch_release_6092VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6101:*:*:*:*:*:*7.10.5 patch_release_6101VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6111:*:*:*:*:*:*7.10.5 patch_release_6111VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6120:*:*:*:*:*:*7.10.5 patch_release_6120VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6132:*:*:*:*:*:*7.10.5 patch_release_6132VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6137:*:*:*:*:*:*7.10.5 patch_release_6137VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6140:*:*:*:*:*:*7.10.5 patch_release_6140VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6149:*:*:*:*:*:*7.10.5 patch_release_6149VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:-:*:*:*:*:*:*7.10.6VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6069:*:*:*:*:*:*7.10.6 patch_release_6069VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6073:*:*:*:*:*:*7.10.6 patch_release_6073VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6080:*:*:*:*:*:*7.10.6 patch_release_6080VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6085:*:*:*:*:*:*7.10.6 patch_release_6085VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6093:*:*:*:*:*:*7.10.6 patch_release_6093VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6102:*:*:*:*:*:*7.10.6 patch_release_6102VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6112:*:*:*:*:*:*7.10.6 patch_release_6112VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6121:*:*:*:*:*:*7.10.6 patch_release_6121VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6133:*:*:*:*:*:*7.10.6 patch_release_6133VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6138:*:*:*:*:*:*7.10.6 patch_release_6138VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6141:*:*:*:*:*:*7.10.6 patch_release_6141VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6146:*:*:*:*:*:*7.10.6 patch_release_6146VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6147:*:*:*:*:*:*7.10.6 patch_release_6147VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6148:*:*:*:*:*:*7.10.6 patch_release_6148VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6150:*:*:*:*:*:*7.10.6 patch_release_6150VulnerableOpen-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6008:*:*:*:*:*:* Versions 7.10.5 patch_release_6008 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6010:*:*:*:*:*:* Versions 7.10.5 patch_release_6010 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6016:*:*:*:*:*:* Versions 7.10.5 patch_release_6016 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6020:*:*:*:*:*:* Versions 7.10.5 patch_release_6020 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6026:*:*:*:*:*:* Versions 7.10.5 patch_release_6026 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6029:*:*:*:*:*:* Versions 7.10.5 patch_release_6029 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6034:*:*:*:*:*:* Versions 7.10.5 patch_release_6034 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6035:*:*:*:*:*:* Versions 7.10.5 patch_release_6035 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6038:*:*:*:*:*:* Versions 7.10.5 patch_release_6038 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6046:*:*:*:*:*:* Versions 7.10.5 patch_release_6046 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6051:*:*:*:*:*:* Versions 7.10.5 patch_release_6051 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6053:*:*:*:*:*:* Versions 7.10.5 patch_release_6053 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6060:*:*:*:*:*:* Versions 7.10.5 patch_release_6060 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6061:*:*:*:*:*:* Versions 7.10.5 patch_release_6061 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6066:*:*:*:*:*:* Versions 7.10.5 patch_release_6066 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6068:*:*:*:*:*:* Versions 7.10.5 patch_release_6068 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6072:*:*:*:*:*:* Versions 7.10.5 patch_release_6072 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6079:*:*:*:*:*:* Versions 7.10.5 patch_release_6079 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6084:*:*:*:*:*:* Versions 7.10.5 patch_release_6084 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6092:*:*:*:*:*:* Versions 7.10.5 patch_release_6092 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6101:*:*:*:*:*:* Versions 7.10.5 patch_release_6101 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6111:*:*:*:*:*:* Versions 7.10.5 patch_release_6111 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6120:*:*:*:*:*:* Versions 7.10.5 patch_release_6120 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6132:*:*:*:*:*:* Versions 7.10.5 patch_release_6132 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6137:*:*:*:*:*:* Versions 7.10.5 patch_release_6137 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6140:*:*:*:*:*:* Versions 7.10.5 patch_release_6140 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6149:*:*:*:*:*:* Versions 7.10.5 patch_release_6149 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:-:*:*:*:*:*:* Versions 7.10.6 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6069:*:*:*:*:*:* Versions 7.10.6 patch_release_6069 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6073:*:*:*:*:*:* Versions 7.10.6 patch_release_6073 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6080:*:*:*:*:*:* Versions 7.10.6 patch_release_6080 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6085:*:*:*:*:*:* Versions 7.10.6 patch_release_6085 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6093:*:*:*:*:*:* Versions 7.10.6 patch_release_6093 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6102:*:*:*:*:*:* Versions 7.10.6 patch_release_6102 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6112:*:*:*:*:*:* Versions 7.10.6 patch_release_6112 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6121:*:*:*:*:*:* Versions 7.10.6 patch_release_6121 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6133:*:*:*:*:*:* Versions 7.10.6 patch_release_6133 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6138:*:*:*:*:*:* Versions 7.10.6 patch_release_6138 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6141:*:*:*:*:*:* Versions 7.10.6 patch_release_6141 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6146:*:*:*:*:*:* Versions 7.10.6 patch_release_6146 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6147:*:*:*:*:*:* Versions 7.10.6 patch_release_6147 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6148:*:*:*:*:*:* Versions 7.10.6 patch_release_6148 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6150:*:*:*:*:*:* Versions 7.10.6 patch_release_6150 Vulnerable ·Open-Xchange GmbH

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-37308
  2. 2026-10-03 Alias added: GHSA-cm9p-43gv-wxfx

References

Exploit 1

Advisory 1

  • TI-2022-17394 OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only… CVSS 3.1MEDIUM 5.3
  • TI-2022-17393 OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request… CVSS 3.1MEDIUM 5.3
  • TI-2022-17392 OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location… CVSS 3.1MEDIUM 5.3
  • TI-2022-17391 OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help… CVSS 3.1MEDIUM 6.1
  • TI-2022-17390 OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name. CVSS 3.1MEDIUM 6.1
  • TI-2022-17388 OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by… CVSS 3.1MEDIUM 6.1
See all 156 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences