Security Advisory

CVE-2020-12625

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-04 01:57:31

Last updated 2024-08-04 12:04:22

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.

← Browse all CVEs View on cve.org ↗