CVE-2005-4191

no score yetEPSS 1.1%

horde nag task list manager h3: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
Published: 2005-12-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

horde:nag_task_list_manager_h3

References

http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h
http://lists.horde.org/archives/announce/2005/000236.html
http://secunia.com/advisories/17969
http://www.sec-consult.com/245.html
http://www.securityfocus.com/bid/15804

Check your stack JSON