vulndaily - Daily Cybersecurity Vulnerability Intelligence & CVE Tracking

Roundcube Site Scripting vulnerability Cross-Site Sc - CVE-2024-42009

June 24, 2025 CRITICAL CVSS: 9.3 ⏱️ 4 min

CVE-2024-42009 is a critical Cross-Site Scripting (XSS) vulnerability affecting Roundcube Webmail versions prior to 1.5.8 and between 1.6.0 and 1.6.7. With a CVSS score of 9.3, this vulnerability allo...

Roundcube Webmail (< 1.5.8) Roundcube Webmail (1.6.0 - 1.6.8)

cve-2024 severity-critical xss

Vulnerabilities tagged "xss" (1 post)