CVE-2020-12625

2020-05-04T02:15:00
ID CVE-2020-12625
Type cve
Reporter cve@mitre.org
Modified 2020-09-24T18:15:00

Description

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.