CVE-2015-1433

program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site…

published February 3, 2015

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the style attribute in an email.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02913 · 86.9th percentile
Published
2015-02-03T16:00Z
EPSS history
Timeline
  • 03 FEB 16:00Z
    program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site…
    cvelistv5