CVE-2012-6121

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link.

Date published : 2013-02-24

http://www.securityfocus.com/bid/57849

http://sourceforge.net/news/?group_id=139281&id=310213