https://pwn.watch/i/roundcube-webmail-cve-2024-37383 RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code. Added to the CISA KEV catalog on 2024-10-24. en Thu, 24 Oct 2024 00:00:00 GMT https://pwn.watch/i/roundcube-webmail-cve-2024-37383 https://pwn.watch/i/roundcube-webmail-cve-2024-37383#2024-10-24-4a6e85ba Thu, 24 Oct 2024 00:00:00 GMT medium <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/roundcube-webmail-cve-2024-37383 https://pwn.watch/i/roundcube-webmail-cve-2024-37383#2024-06-07-73833280 Fri, 07 Jun 2024 00:00:00 GMT medium <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-37383">Source</a></p>