CVE-2009-0931: Debian Horde

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Debian Horde: up to and including 3.3.1; up to and including 3.3.2; version 3.2.2 only; version 3.2.3 only; version 3.3 only
• Debian Horde Groupware: up to and including 1.1.1; up to and including 1.1.2; up to and including 1.1.3; up to and including 1.1.4

Published 2009-03-17. Last modified 2026-06-16.