[imp] Horde v 5.2.22 vulnerability – obfuscation via HTML encoding – XSS payload

Nataša K. Arh natasa.jakec at gmail.com
Fri Mar 21 11:53:27 UTC 2025


The vulnerability was tested on latest version as stated here:
https://www.horde.org/download/imp, but with applied patches:
Horde 5.2.23
IMP 6.2.27

Regards.


More information about the imp mailing list