CVE-2018-19206
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 60%
exploitation probability
60%top 1% of all CVEs
observed exploitation
nono source reports it
steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY element, within an HTML attachment.
Affected products
n/a · n/a