https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:17:45.280334+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111824 EUVD-2026-111824 2026-10-09T15:17:45.284150+00:00 EUVD-2026-111824 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3508 fkie_cve-2012-3508 2026-10-09T15:17:45.284184+00:00

Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.

 https://cve.radiocsirt.org/vuln/ghsa-h9g8-25j6-gxp7 GHSA-h9g8-25j6-gxp7 2026-10-09T15:17:45.284217+00:00

Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.

 https://cve.radiocsirt.org/vuln/gsd-2012-3508 gsd-2012-3508 2026-10-09T15:17:45.284235+00:00 gsd-2012-3508 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10491-1 openSUSE-SU-2024:10491-1 — roundcubemail-1.2.3-1.1 on GA media 2026-10-09T15:17:45.284248+00:00

roundcubemail-1.2.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-3508 Withdrawn: UBUNTU-CVE-2012-3508 2026-10-09T15:17:45.284268+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: roundcube

Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.