Description
Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload.
Remediation
References
Related Vulnerabilities
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322)
WordPress Plugin WooCommerce Information Disclosure (4.5.2)
OpenSSL Cryptographic Issues Vulnerability (CVE-2011-4576)
WordPress Plugin Embedded Video 'lembedded-video.php' Cross-Site Scripting (4.1)
WordPress Plugin Companion Revision Manager-Revision Control Unspecified Vulnerability (1.3)