CVE-2021-23931

OX App Suite through 7.10.4 allows XSS via an inline binary file.