EDB-52173

PoC

Roundcube Webmail 1.6.6 - Stored Cross Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor AmirZarghampublished 2025-04-11catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-37383US	medium6.1OT critical	74.0% (99th)	KEV	2024-06-07
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.