Roundcube Webmail Persistent Cross-Site Scripting (XSS) ยท updates https://pwn.watch/i/roundcube-webmail-cve-2023-43770 Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages. Added to the CISA KEV catalog on 2024-02-12. CVE-2023-43770 was assigned before 2024; the KEV listing came in 2024. en Mon, 12 Feb 2024 00:00:00 GMT Roundcube Webmail Persistent Cross-Site Scripting (XSS): CISA added CVE-2023-43770 to the KEV catalog (federal deadline 2024-03-04) https://pwn.watch/i/roundcube-webmail-cve-2023-43770 https://pwn.watch/i/roundcube-webmail-cve-2023-43770#2024-02-12-3f110644 Mon, 12 Feb 2024 00:00:00 GMT medium <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>