Userspice Userspice vulnerabilities

• userspice userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php CVE-2018-25350 9.3 CriticalMay 23, 2026
• userspice userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header CVE-2018-25349 5.1 MediumMay 23, 2026