Description
Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.
Remediation
References
Related Vulnerabilities
PHP Use After Free Vulnerability (CVE-2016-6295)
Apache Tomcat Other Vulnerability (CVE-2001-1563)
WordPress Plugin WP Instagram-Best Instagram Feeds Cross-Site Scripting (1.0.19)
Magento Incorrect Authorization Vulnerability (CVE-2022-34255)
e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-50916)