Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcubewashtml fails to validate the by attribute in SVG SMIL animations; as a result, tags within HTML emails can load remote...