CVE-2005-1320 Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde mnemo | = 1.1 | No fix listed |
| horde mnemo | = 1.1.1 | No fix listed |
| horde mnemo | = 1.1.2 | No fix listed |
| horde mnemo | = 1.1.3 | No fix listed |
References
- cvs.horde.org
- [mnemo] 20050422 Mnemo 1.1.4 (final) mailing-list
- 15078 patch third-party-advisory