Egroupware : Security Vulnerabilities, CVEs, Published In 2008 (XSS)
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.
Max CVSS
4.3
EPSS Score
0.56%
Published
2008-03-25
Updated
2020-12-01
1 vulnerabilities found