CVE-2007-1473

no score yetEPSS 5.3%

horde horde application framework: no CVSS score yet. EPSS 5.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.

EPSS: 5.3% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2007-03-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

horde:horde_application_framework

References

http://lists.horde.org/archives/announce/2007/000315.html
http://secunia.com/advisories/24528
http://secunia.com/advisories/24995
http://secunia.com/advisories/27565
http://securityreason.com/securityalert/2427

Check your stack JSON