CVE-2021-26925

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering

published February 9, 2021

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01006 · 62.7th percentile
Published
2021-02-09T08:53Z
EPSS history
Timeline
  • 09 FEB 08:53Z
    Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering
    cvelistv5