CVE-2022-28715

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.5

Description The issue allows a remote attacker to inject an arbitrary script via unspecified vectors, exploiting a cross-site scripting vulnerability in specific parameters.

Recommendations For Cybozu Office versions 10.0.0 through 10.8.5, consider restricting access to the vulnerable parameters as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.