Unrated
OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.
CVE-2021-44212
First seen on SecPulse
References
- advisory open-xchange.com
- report packetstormsecurity.com