Description
Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.
References
- http://downloads.phpgroupware.org/changelog
- GLSA-200409-22 vendor-advisory
- phpgroupware-xss(17289) vdb-entry