All verified exploits

CVE-2025-68461 Stored XSS via SVG Animate

CVE-2025-68461 is a high-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Roundcube sites for it with a live exploit check.

Deterministic high Roundcube CISA KEV Added 8mo ago cve-verified-cve-2025-68461

Is my site vulnerable to CVE-2025-68461?

Detects vulnerable Roundcube versions where SVG animate tags bypass the HTML sanitizer, allowing stored XSS in email rendering and account takeover.

Is your app exploitable through CVE-2025-68461?

Scan your domain free