CVE-2012-6620

Published: Jan 16, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (21)

Products: Horde: Kronolith H4

Horde

1 product

Kronolith H4

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Horde Kronolith H4	Up to 3.0.16
Horde Kronolith H4	Version 3.0.10
Horde Kronolith H4	Version 3.0.11
Horde Kronolith H4	Version 3.0.12
Horde Kronolith H4	Version 3.0.13
Horde Kronolith H4	Version 3.0.14
Horde Kronolith H4	Version 3.0.15
Horde Kronolith H4	Version 3.0.1
Horde Kronolith H4	Version 3.0.2
Horde Kronolith H4	Version 3.0.3
Horde Kronolith H4	Version 3.0.4
Horde Kronolith H4	Version 3.0.5
Horde Kronolith H4	Version 3.0.6
Horde Kronolith H4	Version 3.0.7
Horde Kronolith H4	Version 3.0.8
Horde Kronolith H4	Version 3.0.9
Horde Kronolith H4	Version 3.0
Horde Kronolith H4	Version 3.0 alpha1
Horde Kronolith H4	Version 3.0 beta1
Horde Kronolith H4	Version 3.0 rc1
Horde Kronolith H4	Version 3.0 rc2