CVE-2012-6133

2020-01-3020:22:09

redhat

www.cve.org

0.004 Low

EPSS

Percentile

72.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.

CNA Affected

[
  {
    "product": "Roundup",
    "vendor": "Roundup",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.4.20"
      }
    ]
  }
]