CVE-2012-6121 in Webmail
Summary
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.