Exploit for Cross-site Scripting in Roundcube Webmail

🗓️ 13 Feb 2025 13:56:34Reported by victoniType

githubexploit

githubexploit🔗 github.com👁 925 Views

Demonstrates Cross-site Scripting and CSS injection vulnerabilities in Roundcube Webmail.

Reporter	Title	Published	Views	Family All 127
FreeBSD	Roundcube -- Multiple vulnerabilities	4 Aug 202400:00	–	freebsd
GithubExploit	ethical-hacking-ctf	26 Apr 202602:17	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Roundcube Webmail	9 Jul 202520:18	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Roundcube Webmail	26 May 202500:31	–	githubexploit
ATTACKERKB	CVE-2020-13965	9 Jun 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.	19 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rcmail_action_mail_get->run() function in the RoundCube Webmail client allows a hacker to execute XSS attacks.	16 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mod_css_styles function in the Cascading Style Sheet Handler component of the RoundCube email client allows a hacker to disclose confidential information.	3 Sep 202400:00	–	bdu_fstec
Circl	CVE-2020-13965	26 Jun 202418:10	–	circl
Circl	CVE-2024-42008	5 Aug 202422:16	–	circl

19 Aug 2025 16:46Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 3.19.3

EPSS0.71819

SSVC

cross-site scripting css injection roundcube webmail proof of concept security vulnerabilities