XSS in Horde Groupware
CVE-2008-2783
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php, (2) workweek.php, a…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.
Affected products
- Horde Groupware
- Horde Groupware_webmail_edition
- Horde Kronolith
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)