DLA-4211-1 roundcube - security update

Bulletin has no description...

DSA-5934-1 roundcube - security update

Bulletin has no description...

PT-2023-29938 · Roundcube · Roundcube

Name of the Vulnerable Software and Affected Versions: Roundcube versions 1.4.x through 1.4.14 Roundcube versions 1.5.x through 1.5.4 Roundcube versions 1.6.x through 1.6.3 Description: The issue allows for XSS via a text/html e-mail message containing an SVG image with a USE element. This is...

CVE-2015-1433

program/lib/Roundcube/rcubewashtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting XSS attacks via the style attribute in an email...