Vulnerabilities > Roundcube > Roundcube > 1.3.7

DATE CVE VULNERABILITY TITLE RISK
2022-01-06 CVE-2021-46144 Cross-site Scripting vulnerability in multiple products
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
4.3