CVE-2023-43770 — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA KEVExploited: confirmedRoundcube

Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.

Vulnerability details

Affected productsWebmail
KEV remediation due2024-03-04