Linuxsecurity Fedora 42 and 43 Roundcube Webmail XSS Vulnerabilities Addressed
Article Content
Browse articles 
Fedora 42 and 43 have reported vulnerabilities in RoundCube Webmail, specifically related to cross-site scripting (XSS) and information disclosure. Users of RoundCube, a browser-based multilingual IMAP client, are affected by these security issues, which have been addressed in updates. The updates include support for IPv6 in the database DSN.
Ask AI about this cluster
Answers cite the sources they use
Updated 242d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Fedora and CVE-2025-68460 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Path Traversal Vulnerability in FearlessCMS Disclosed A critical vulnerability, CVE-2026-63190, has been identified in FearlessCMS, a flat-file content management system, allowing unauthenticated attackers to execute privileged PHP scripts in the `/admin/` directory. This flaw arises from improper authentication and path validation, enabling attackers to perform path… 
Critical Unauthenticated File Upload Vulnerabilities Disclosed in WidzialniCMS and WordPress Plugin Two critical vulnerabilities have been disclosed affecting WidzialniCMS and the WordPress plugin Contact Form 7. CVE-2026-114432 in Contact Form 7 allows unauthenticated file uploads leading to remote code execution (RCE) for versions prior to 6.2.4. CVE-2026-110468 and CVE-2026-110469 in WidzialniCMS enable…