CVE-2024-42009 1

Vulnerability (CVE)

CVE-2024-42009: Round Cube Webmail Cross-Site Scripting Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jun 09, 2025

RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in...

Vulnerabilities & Patching