MEDIUMCVSS v3.1 5.4Actively exploited · CISA KEV since 2023-10-26Vulnerability
CVE-2023-5631
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.
Properties
- Vulnerability name
- Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
- Epss score
- 0.76901
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2023-11-16
- Exploited euvd since
- 2023-10-26T00:00:00+00:00
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2023-10-26
- Score
- 5.4
- Euvd base score version
- 3.1
- Euvd vendor
- Roundcube
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 6.1
- Vendor project
- Roundcube
- Content hash
- cc9d09b9492e106e3b1f402b61bb99dcff6eff57369e4470c92f87691e22d0a2
- Published at
- 2023-10-18T15:15:08.727
- Euvd updated
- 2025-10-21T23:05:34+00:00
- Last modified
- 2026-06-17T06:48:58.673
- Euvd epss pct
- 76.9
- Epss percentile
- 0.99547
- Licence
- FIRST EPSS: free to use; attribution requested in publications or products (FAQ)
Related Entities (8)
AFFECTS_PRODUCT (5)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph