Описание
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundup | fixed | 1.4.20-1 | package |
Примечания
http://issues.roundup-tracker.org/issue2550684
EPSS
Процентиль: 79%
0.02
Низкий
Связанные уязвимости
ubuntu
больше 12 лет назад
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.
nvd
больше 12 лет назад
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.
EPSS
Процентиль: 79%
0.02
Низкий