Description

Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message.

Remediation

References

CVE-2009-0413

Related Vulnerabilities

Liferay Portal Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2025-43816)

WordPress Plugin Slider by 10Web-Responsive Image Slider Unspecified Vulnerability (1.1.9)

WordPress Plugin Contact Form Email Multiple Vulnerabilities (1.2.65)

IBM RTC CVE-2018-1694 Vulnerability (CVE-2018-1694)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.2.100)

Severity

Medium

Classification

CVE-2009-0413 CWE-707

Tags

Missing Update Known Vulnerabilities