Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-37309 EUVD-2022-39945GHSA-p7q9-vp7r-68ff

OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.

Published Dec 26, 2022 · Updated Apr 14, 2025 · Assigned by mitre