Description
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link.
Remediation
References
Related Vulnerabilities
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler PHP Object Injection (5.0.0)
WordPress Plugin Scoutnet Kalender Cross-Site Scripting (1.1.0)
Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.18)
WordPress Plugin Catch Breadcrumb Security Bypass (1.6)
WordPress Plugin Download Shortcode Local File Inclusion (0.2.3)