chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33488.json"