CVE-2018-16736
In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings).
Published: 2018-09-09 · CVSS: Unscored
In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7