CVE-2005-3570: Horde

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages".

Affected products

• Horde Horde: version 2.2 only; version 2.2.1 only; version 2.2.3 only; version 2.2.4 only; version 2.2.4_rc1 only; version 2.2.5 only; …

Published 2005-11-16. Last modified 2026-06-16.