OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-43697.json"