Document cross-site scripting CVE in Roundcube

PR: 209841
Reported by: Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security: CVE-2016-5103
Security: https://vuxml.FreeBSD.org/freebsd/97e86d10-2ea7-11e6-ae88-002590263bf5.html