#RoundCube

Exploitation of SVG-Based XSS in RoundCube Webmail Instances

Technical analysis of a cross-site scripting (XSS) vulnerability in RoundCube Webmail triggered by improper sanitization of SVG animate elements.