Threats Tagged 'ghsa-6pvc-73xq-46hq'

1 threat

Threats Tagged 'ghsa-6pvc-73xq-46hq'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.4%	CVE-2026-74998Webmail · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.2EPSS 0.4%2026-08-17CVE Database V5CVE-2026-74998 CVE-2026-74998 is a high-severity cross-site scripting (XSS) vulnerability in Roundcube Webmail. It affects versions before 1.6.18 and 1.7.x before 1.7.3. The issue arises because responses from the CSS proxy were not properly validated, potentially allowing information disclosure or XSS attacks via MIME sniffing. EPSS 0.4%Vulnerability Roundcube #cwe-79 #ghsa-6pvc-73xq-46hq	CVE Database V5	2026-08-17

Showing 1–1 of 1 result