OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code.

By admin