CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS)
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability. Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.
- CISA KEV-listed (remediation due 2023-11-16)
- EPSS 83.2% (99.3% percentile)