CVE-2009-0930

CVE-2009-0930 describes cross-site scripting in Horde IMP, affecting Horde IMP before 4.2.2 and 4.3.3 via vectors in smime.php, pgp.php, and message.php. Multiple connected advisories (Gentoo GLSA 200909-14, Fedora/opensuse notes) corroborate the issue and recommend upgrading Horde IMP to a newer...