[Roundcube Announce] Security update 1.4.11 released

Dear subscribers

We just published a service and security update to the stable version 1.4 of Roundcube Webmail. It provides a fix for a recently reported stored XSS vulnerability as well a some general improvements from our issue tracker.

*Security fix* Fix cross-site scripting (XSS) via HTML messages with malicious CSS content Credits go to Mateusz Szymaniec (CERT Polska).

See the full changelog in the release notes on the Github download page: https://github.com/roundcube/roundcubemail/releases/tag/1.4.11

This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net/download/

Please do backup your data before updating!

Best, Alec & Thomas