Unrated
OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.
CVE-2021-33490
First seen on SecPulse
References
- advisory seclists.org
- report packetstormsecurity.com
- web open-xchange.com