CVE-2013-5690
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment.
- Score
- CVSS 2.0 3.5 Low
- Status
- Modified - cve@mitre.org
- Published
- 2013-10-03
- Last modified
- 2024-09-16
- Weaknesses
- CWE-79
Affected products
References
- http://www.securityfocus.com/archive/1/528940
