Description
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
Remediation
References
Related Vulnerabilities
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)
WordPress Plugin Web Directory Free SQL Injection (1.6.9)
WordPress Plugin Really Simple Guest Post Local File Inclusion (1.0.6)
XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-32068)
WordPress Plugin Affiliates Manager Cross-Site Scripting (2.8.9)