OX App Suite through 7.10.6 allows XSS by forcing block-wise read.Referenceshttps://open-xchange.comhttps://seclists.org/fulldisclosure/2022/Jul/11