CVE-2020-12625

CVE-2020-12625: Cross-Site Scripting tramite allegato HTML malevolo in Roundcube Webmail Esiste una vulnerabilità di Cross-Site scripting XSS nelle versioni di Roundcube precedenti alla 1.4.4, 1.3.11 e 1.2.10. Sfruttando l'elemento XML "" in un'email con un allegato "text/html", un attaccante può...

CVE-2026-32870

Kirby is an open-source content management system. Kirby's Xml::value method has special handling for blocks. If the input value is already valid CDATA, it is not escaped a second time but allowed to pass through. However, prior to versions 4.9.0 and 5.4.0, it was possible to trick this check int...