Horde Webmail – XSS + CSRF to SQLi, RCE, Stealing Emails <= v5.2.22 – CXSecurity.com

https://cxsecurity.com/issue/WLB-2019050199