Description
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL, (2) malformed nested SCRIPT elements, (3) a mail signature, or (4) JavaScript code within an image file.
References (1)
Core 1
Core References
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-04/0183.html
Scores
EPSS
0.0022
EPSS Percentile
45.2%
Details
CWE
CWE-79
Status
published
Products (10)
open-xchange/open-xchange_appsuite
6.20.7
open-xchange/open-xchange_appsuite
6.22.0
open-xchange/open-xchange_appsuite
6.22.1
open-xchange/open-xchange_appsuite
7.0.1
open-xchange/open-xchange_appsuite
7.0.2
open-xchange/open-xchange_server
6.20.7
open-xchange/open-xchange_server
6.22.0
open-xchange/open-xchange_server
6.22.1
open-xchange/open-xchange_server
7.0.1
open-xchange/open-xchange_server
7.0.2
Published
Sep 05, 2013
Tracked Since
Feb 18, 2026