XSS in location part of the event calendar, trough invitation.
Create a new event with following code(1) as location, and invite a Sogo user.
(1) Whatever <script>alert('xss')\;</script>
The code gets executed after clicking on calendar event.
ludovic
2013-07-16 15:32
administrator ~0005749
https://github.com/inverse-inc/sogo/commit/e08ebd2390ad81bcf7d63c200de85eddbf80bcd6
