Description

Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.

Remediation

References

CVE-2012-4668

Related Vulnerabilities

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-32730)

WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7.4)

silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12437)

WordPress 4.7.x PHP Object Injection (4.7 - 4.7.20)

Oracle Database Server CVE-2015-2586 Vulnerability (CVE-2015-2586)

Severity

Medium

Classification

CVE-2012-4668 CWE-707

Tags

Missing Update Known Vulnerabilities