CVE-2021-23935 - OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code

MEDIUM

OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code

Published Jan 12, 2021

6.1

MEDIUM

CVSS 3.1

EPSS 1.08%

OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10857		Advisory
https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html		x_refsource_MISCNot ApplicableThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 12, 2021

Updated Aug 3, 2024

Reserved Jan 12, 2021

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 12, 2021

Updated Aug 3, 2024

Exploited since n/a