CVE-2016-5303: XSS
Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form (1) action or (2) xlink attribute.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5303?
CVE-2016-5303 has a moderate severity rating due to its potential impact from cross-site scripting attacks.
How do I fix CVE-2016-5303?
To fix CVE-2016-5303, upgrade to Horde Groupware and Horde Groupware Webmail Edition version 5.2.16 or later.
What types of attacks are possible with CVE-2016-5303?
CVE-2016-5303 allows remote attackers to inject arbitrary web script or HTML through specially crafted content.
Which versions of Horde Groupware are affected by CVE-2016-5303?
CVE-2016-5303 affects Horde Groupware and Horde Groupware Webmail Edition versions before 5.2.16.
Is CVE-2016-5303 a common vulnerability?
CVE-2016-5303 is a known vulnerability that can be exploited in environments using vulnerable versions of Horde.