Unrated
OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.
CVE-2021-44211
First seen on SecPulse
References
- report packetstormsecurity.com
- web open-xchange.com