Firetruck

CVE-2020-13965

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected
webmailroundcube / webmail>= 0, < 1.3.12affected
webmailroundcube / webmail>= 1.4.0, < 1.4.5affected