CVE-2008-1974

MEDIUM · CVSS 4.3 EPSS 4.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-04-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2008-1974

Severity

MEDIUM

CVSS

4.3

EPSS

4.88%

Original NVD Description

Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter.