VULNERABILITY INTELLIGENCE

CVE-2010-3693

CVSS score4.3 NONE
EPSS probability2.59%
CISA KEVNot currently listed
Published2011-04-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references