Description
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.
References
- 65009 vdb-entry
- openxchange-cve20137141-xss(90544) vdb-entry
- 1029650 vdb-entry
- 102192 vdb-entry
- 20140117 Open-Xchange Security Advisory 2014-01-17 mailing-list