Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*" ] }