Debian : Security Vulnerabilities, CVEs, Published In 2009 (XSS)
Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
4.3
EPSS Score
0.23%
Published
2009-03-17
Updated
2009-03-18
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php.
Max CVSS
4.3
EPSS Score
0.35%
Published
2009-03-17
Updated
2009-04-16
2 vulnerabilities found