Roundcube Releases Security Updates 1.6.16 and 1.7.1 (roundcube.net)

• Multiple vulnerabilities fixed in Roundcube 1.6.x and 1.7.x
• Includes XSS, SQL injection, SSRF, code injection, and file deletion
• Upgrade to 1.6.16 or 1.7.1 strongly recommended

"Roundcube has released security updates for versions 1.6 LTS and 1.7, fixing multiple vulnerabilities including stored XSS, CSS injection, SQL injection, SSRF, remote image blocking bypass, and code injection in LDAP. Immediate update is recommended."