Roundcube Webmail Cross-Site Scripting (XSS) ยท updates https://pwn.watch/i/roundcube-webmail-cve-2020-13965 Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment. Added to the CISA KEV catalog on 2024-06-26. CVE-2020-13965 was assigned before 2024; the KEV listing came in 2024. en Wed, 26 Jun 2024 00:00:00 GMT Roundcube Webmail Cross-Site Scripting (XSS): CISA added CVE-2020-13965 to the KEV catalog (federal deadline 2024-07-17) https://pwn.watch/i/roundcube-webmail-cve-2020-13965 https://pwn.watch/i/roundcube-webmail-cve-2020-13965#2024-06-26-80014c97 Wed, 26 Jun 2024 00:00:00 GMT medium <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>