NetSight
IP …
medium4.3

CVE-2009-0931

Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Gro…

Impact

Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffected versions
DebianHorde
through 3.3.1
through 3.3.2
Versions 3.2.2, 3.2.3, 3.3
DebianHorde Groupware
through 1.1.1
through 1.1.2
through 1.1.3
through 1.1.4

Weakness classification

CWE-79

References