CyberRota Analysis
AI-GeneratedRoundcube Webmail versions prior to 1.6.18 and 1.7.x before 1.7.3 are vulnerable to stored cross-site scripting (XSS) via the "Add to address book" feature, allowing attackers to inject malicious scripts that can execute in the context of other users. This vulnerability poses a medium risk as it could lead to unauthorized access to user data or session hijacking. Organizations using affected versions of Roundcube should prioritize applying the latest updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS.
Related CVEs
Other vulnerabilities affecting the same vendor(s)