CVE-2018-16736
PoC —CVSS 3.0
5.4 medium
EPSS
3%p84
Published
()
Modified
Description
In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings).
- Vendors
- rcfilters project
- Products
- rcfilters
- Weakness
- CWE-79
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.