CVE-2025-68461
HIGH KEVRoundcube Webmail < 1.5.12 and 1.6 < 1.6.12 - Cross-Site Scripting via SVG Animate Tag
Title source: llmExploitation Summary
CVE-2025-68461 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 20, 2026. EIP tracks 2 public exploits from researchers including rxerium, gotr00t0day.
AI-analyzed exploit summary This repository contains a Nuclei template for detecting vulnerable Roundcube Webmail instances affected by CVE-2025-68461, an XSS vulnerability via SVG animate tags. It extracts version information and checks against known vulnerable versions.
Description
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Exploits (2)
This repository contains a Nuclei template for detecting vulnerable Roundcube Webmail instances affected by CVE-2025-68461, an XSS vulnerability via SVG animate tags. It extracts version information and checks against known vulnerable versions.
This repository contains a C++ scanner tool designed to detect CVE-2025-68461, an XSS vulnerability in Roundcube Webmail versions 1.5.0-1.5.11 and 1.6.0-1.6.11. The tool extracts version information from Roundcube instances and checks against known vulnerable versions.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N