Description OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger. References https://open-xchange.com http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html