php-horde-core vulnerabilities (Debian)

2 vulnerabilities.

• php-horde-core Debian In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. CVE-2017-16907 Fix available 5.4 MediumNovember 20, 2017
• php-horde-core Debian Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde... CVE-2015-8807 Fix available 6.1 MediumFebruary 28, 2016