Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-081.txt
No PoCs found on GitHub currently.