OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HTML e-mail message.Referenceshttps://open-xchange.comhttps://seclists.org/fulldisclosure/2022/Sep/0