CVE-2023-43770 Roundcube Webmail
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.
- CVSS
- not scored
On CISA’s exploited list
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
- Added
- 2024-02-12
- Federal patch deadline
- 2024-03-04
- Ransomware use
- not known