Horde Groupware Webmail Edition up to and including 5.2.22 allows XSS via an admin/user.php?form=update_f&user_name= or admin/user.php?form=remove_f&user_name= or admin/config/diff.php?app= URI.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
horde groupware |