Description
Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NAffected software
No affected versions have been published.
Timeline
- Published
- May 2, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified