github roundcube/roundcubemail 1.3.16
Roundcube Webmail 1.3.16

latest releases: 1.6.6, 1.4.16, 1.6.5...
3 years ago

This is a security update to the LTS version 1.3.
It fixes a recently reported stored cross-site scripting (XSS)
vulnerability via HTML or plain text messages with malicious content [CVE-2020-35730].

Credits for this finding go to Alex Birnberg.

This version in considered stable and we strongly recommend to update all productive
installations of Roundcube 1.3.x with it. Please do backup your data before updating!

Don't miss a new roundcubemail release

NewReleases is sending notifications on new releases.