Lucene search

K
cvelistMitreCVELIST:CVE-2015-8793
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2015-8793

2022-10-0316:15:59
mitre
www.cve.org
cross-site scripting
roundcube
remote attackers

0.004 Low

EPSS

Percentile

74.7%

Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937.

0.004 Low

EPSS

Percentile

74.7%