Stored XSS via email signature class

Cross-site scripting in OX App Suite through 7.10.5 allows remote authenticated users to execute script via an HTML email signature. The signature renderer places the element class attribute into generated HTML without sufficient neutralization, allowing attacker-controlled markup to execute when a recipient views the signature. Exploitation requires authenticated access to create or send a crafted signature and victim interaction with the resulting message; the reported impact is script execution in the victim's web session, including possible data access or unwanted actions.