CVE-2022-37306 Information

Description

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger.

Reference

http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html https://open-xchange.com