Cross site scripting

2008-08-1301:41:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to “unescaped output,” possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.

CPENameOperatorVersion
groupware_webmail_editioneq1.0.1
groupware_webmail_editioneq1.1
groupware_webmail_editioneq1.0.5
groupware_webmail_editioneq1.0.7
groupware_webmail_editioneq1.0.3
groupware_webmail_editioneq1.0
groupware_webmail_editioneq1.0.2
groupware_webmail_editioneq1.0.6
groupware_webmail_editioneq1.0.4

Name	Operator	Version
groupware_webmail_edition	eq	1.0.1
groupware_webmail_edition	eq	1.1
groupware_webmail_edition	eq	1.0.5
groupware_webmail_edition	eq	1.0.7
groupware_webmail_edition	eq	1.0.3
groupware_webmail_edition	eq	1.0
groupware_webmail_edition	eq	1.0.2
groupware_webmail_edition	eq	1.0.6
groupware_webmail_edition	eq	1.0.4