CVE-2005-4191: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via 1 the tasklist's name or 2 description, when creating a new tasklist...

nag -- Cross site scripting vulnerabilities in several of the tasklist name and task data fields

Announce of Nag H3 2.0.4 final: This 2.0.4 is a security release that fixes cross site scripting vulnerabilities in several of the tasklist name and task data fields. None of the vulnerabilities can be exploited by unauthenticated users; however, we strongly recommend that all users of Nag 2.0.3...