CVE

CVE-2020-35730

CVE-2020-35730

linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a crafted email message.

Source: CVE-2020-35730

Exit mobile version