Description

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

Remediation

References

CVE-2012-1253

Related Vulnerabilities

MySQL Resource Management Errors Vulnerability (CVE-2010-3837)

WordPress Plugin BruteBank-WP Security & Firewall Cross-Site Request Forgery (1.8)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-45149)

ownCloud Cryptographic Issues Vulnerability (CVE-2013-1941)

Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)

Severity

Low

Classification

CVE-2012-1253 CWE-707

Tags

Missing Update Known Vulnerabilities