https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:34:02 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-14154 cnvd-2021-14154 https://cve.radiocsirt.org/vuln/cnvd-2021-14154 https://cve.radiocsirt.org/vuln/euvd-2026-25248 EUVD-2026-25248 https://cve.radiocsirt.org/vuln/euvd-2026-25248 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26929 <p>An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.</p> <p>An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-26929 https://cve.radiocsirt.org/vuln/ghsa-qc5g-54hm-vfmc <p>An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.</p> <p>An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.</p> https://cve.radiocsirt.org/vuln/ghsa-qc5g-54hm-vfmc https://cve.radiocsirt.org/vuln/gsd-2021-26929 gsd-2021-26929 https://cve.radiocsirt.org/vuln/gsd-2021-26929 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26929 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-horde-text-filter, Ubuntu:18.04:LTS: php-horde-text-filter</p> <p>An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-horde-text-filter, Ubuntu:18.04:LTS: php-horde-text-filter</p> <p>An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26929