Description

Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.

Remediation

References

CVE-2012-4668

Related Vulnerabilities

ZenCart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-11675)

MySQL CVE-2020-2627 Vulnerability (CVE-2020-2627)

WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)

Jetty CVE-2018-12536 Vulnerability (CVE-2018-12536)

WordPress Plugin Soundy Audio Playlist Cross-Site Scripting (4.6)

Severity

Medium

Classification

CVE-2012-4668 CWE-707

Tags

Missing Update Known Vulnerabilities