Files
CVEs-PoC/2016/CVE-2016-4068.md
2025-09-29 21:09:30 +02:00

721 B

CVE-2016-4068

Description

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.

POC

Reference

Github