Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-43770
HistorySep 22, 2023 - 6:15 a.m.

Cross site scripting

2023-09-2206:15:00
PRIOn knowledge base
www.prio-n.com
9
cross site scripting
roundcube
1.4.14
1.5.x
1.5.4
1.6.x
1.6.3
email messages
string replacer

0.113 Low

EPSS

Percentile

95.3%

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.