Horde Help Subsystem XSS

Summary
The target is running at least one instance of Horde in which the help subsystem is vulnerable to a cross site scripting attack since information passed to the help window is not properly sanitized.
Solution
Upgrade to Horde version 2.2.7 or later.