FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)

Posted by Evan Tang on Aug 26https://blog.evan.lat/posts/CVE-2026-65053/ the blog talks about two vulns that are chainable together. for the sake of brevity ill write up on the stored xss one. in lib/Mime/Status.php, we see a pretty viable xss sink: $out .= '<tr><td>' . $val . '</td></tr>'; xrefing this we see that most...