https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T21:23:48.172066+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-48848 CVE-2026-48848 2026-10-05T21:23:48.194777+00:00

Affected: Roundcube Webmail

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.