Description
Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message.
Remediation
References
Related Vulnerabilities
WordPress Plugin BackWPup Multiple Unspecified Vulnerabilities (3.2.1)
Jenkins CVE-2013-0329 Vulnerability (CVE-2013-0329)
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.37)
WordPress Plugin Easy Testimonial Manager SQL Injection (1.2.0)
WordPress Plugin Compact WP Audio Player Cross-Site Scripting (1.9.7)