Description
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Roundcubemail | Roundcube / Roundcubemail | >= 1.4.0, < 1.5.14 | affected |
| Roundcubemail | Roundcube / Roundcubemail | >= 1.5.0, < 1.5.4 | affected |
| Roundcubemail | Roundcube / Roundcubemail | 1.5.15 | unaffected |
| Roundcubemail | Roundcube / Roundcubemail | 1.5.5 | unaffected |
| Roundcubemail | Roundcube / Roundcubemail | >= 1.6.0, < 1.6.3 | affected |
| Roundcubemail | Roundcube / Roundcubemail | 1.6.4 | unaffected |