Description

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

Remediation

References

CVE-2012-1253

Related Vulnerabilities

Claroline Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-37159)

Oracle JRE CVE-2013-1564 Vulnerability (CVE-2013-1564)

Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2015-3921)

WordPress Plugin Database Backup for WordPress Cross-Site Scripting (2.3.3)

WordPress Plugin Category Grid View Gallery Cross-Site Scripting (2.3.3)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-1253