Vulnerabilities > Horde > Horde Mime Viewer > 2.2.1

DATE CVE VULNERABILITY TITLE RISK
2022-03-11 CVE-2022-26874 Cross-site Scripting vulnerability in multiple products
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition.
network
low complexity
horde debian CWE-79
5.4