CVE-2023-24602 Information

Description

OX App Suite before frontend 7.10.6-rev24 allows XSS via data to the Tumblr portal widget such as a post title.

Reference

https://open-xchange.com http://seclists.org/fulldisclosure/2023/May/3