← Database

CVE-2010-3077

MEDIUM CVSS: 4.3 Published: 2010-11-09 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter.

Affected Platforms

Horde Horde Application Framework

Weakness Type

CWE-79

References