CVE ID:	CVE-2020-35730
Description:	An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.
Test IDs:	1.3.6.1.4.1.25623.1.0.145132   1.3.6.1.4.1.25623.1.0.878795   1.3.6.1.4.1.25623.1.0.878796   1.3.6.1.4.1.25623.1.0.892508   1.3.6.1.4.1.25623.1.1.10.2020.0481   1.3.6.1.4.1.25623.1.0.704821
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35730 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMLIZWKMTRCLU7KZLEQHELS4INXJ7X5Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCEU4BM5WGIDJWP6Z4PCH62ZMH57QYM2/ https://roundcube.net/download/ https://www.alexbirnberg.com/roundcube-xss.html