CVE-2023-43770

This repository contains a functional Python script that exploits CVE-2023-43770, an XSS vulnerability in Roundcube Webmail. The PoC sends a crafted email with a malicious script embedded in a text/plain message, leveraging improper handling in Roundcube's string replacer.

This repository provides a technical description and references for CVE-2023-43770, a stored XSS vulnerability in Roundcube. It includes details about the attack chain, affected versions, and references to patches and external resources.

This PoC demonstrates a chained exploit combining XSS and SQLi in Roundcube Webmail to exfiltrate session data. The Python script sends a malicious email with an XSS payload that triggers a SQL injection to extract session variables.