Description

Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI.

Remediation

References

CVE-2011-2937

Related Vulnerabilities

Oracle JRE CVE-2022-21619 Vulnerability (CVE-2022-21619)

Jboss EAP Improper Authentication Vulnerability (CVE-2011-4085)

WordPress Plugin Photospace Responsive Gallery Unspecified Vulnerability (1.1.7)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.13.56)

WordPress Plugin Search & Replace PHP Object Injection (3.2.2)

Severity

Medium

Classification

CVE-2011-2937 CWE-707

Tags

Missing Update Known Vulnerabilities