Description
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.
Remediation
References
Related Vulnerabilities
MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)
Jboss EAP CVE-2011-1483 Vulnerability (CVE-2011-1483)
WordPress Plugin Stock in & out SQL Injection (1.0.4)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5106)
WordPress Plugin Background Music Cross-Site Scripting (1.0)