← Back to CVE List

CVE-2020-35730

Published: 2020-12-28T20:15Z
Last Modified: 2025-02-21T22:38Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt