Описание
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundup | fixed | 1.4.20-1 | package |
Примечания
http://issues.roundup-tracker.org/issue2550724
EPSS
Процентиль: 73%
0.0156
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 6 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
CVSS3: 6.1
nvd
больше 6 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
CVSS3: 6.1
github
больше 4 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
EPSS
Процентиль: 73%
0.0156
Низкий