Roundcubemail vulnerabilities
1 known vulnerability in Roundcubemail from Roundcube. None are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
0high
1exploited
5.4average CVSS score
Latest first
- 5.4 Medium severity
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Exploited
Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaS