Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module.
| Software | From | Fixed in |
|---|---|---|
| phpgroupware / phpgroupware | 0.9.14.003 | 0.9.14.003.x |