natasaka

2 exploits Active since Mar 2025
CVE-2025-30349 NOMISEC HIGH WORKING POC
Horde IMP < 6.2.27 - Cross-Site Scripting via Crafted Email onerror Attribute
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in the wild in March 2025.
CVSS 7.2
CVE-2025-30349 WRITEUP HIGH WORKING POC
Horde IMP < 6.2.27 - Cross-Site Scripting via Crafted Email onerror Attribute
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in the wild in March 2025.
CVSS 7.2