RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-03672)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in the email content page of RoundCube Webmail. An attacker can exploit this vulnerability to inject arbitrar...