Description

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.

Remediation

References

CVE-2020-12625

Related Vulnerabilities

WordPress Plugin Shopping Cart & eCommerce Store Arbitrary File Upload (3.0.8)

Squid Operation on a Resource after Expiration or Release Vulnerability (CVE-2024-23638)

ownCloud Improper Input Validation Vulnerability (CVE-2012-2270)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.3)

IBM RTC CVE-2020-4964 Vulnerability (CVE-2020-4964)

Severity

Medium

Classification

CVE-2020-12625 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities