Description

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.

Remediation

References

CVE-2021-26925

Related Vulnerabilities

WordPress Plugin WP Accessibility Cross-Site Scripting (1.6.10)

WordPress Plugin SG Optimizer Local File Inclusion (5.0.12)

MySQL CVE-2017-3467 Vulnerability (CVE-2017-3467)

WordPress Plugin Premium Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (4.2.7)

WordPress Plugin WP Simple Spreadsheet Fetcher for Google Cross-Site Request Forgery (0.3.6)

Severity

Medium

Classification

CVE-2021-26925 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities