Description
Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters.
References
- 11164 vdb-entry
- 11546 vdb-entry
- 12992 third-party-advisory
- [horde-announce] 20041026 Horde 2.2.7 (final) mailing-list
- horde-help-window-xss(17881) vdb-entry
- http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u
- 1011959 vdb-entry