| Package | Affected versions | Patched versions |
|---|---|---|
| webmail | = 0.1= 0.1.1= 0.2= 0.2.1= 0.3= 0.3.1= 0.4= 0.4.1= 0.4.2= 0.5= 0.5.1= 0.5.2≤ 0.5.3 |
Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free