| Package | Affected versions | Patched versions |
|---|---|---|
| egroupware | = 1.4.001 |
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to (1) preferences/inc/class.uicategories.inc.php and (2) admin/inc/class.uicategories.inc.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free