Description
OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constructor, in a Notes item.
Unscored
CVE-2020-28945
EUVD-2020-21333GHSA-pv7m-66r4-95xg
OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constr…
Published May 3, 2021 · Updated Aug 4, 2024 · Assigned by mitre