7 matches found
GHSA-5V6Q-XQQ8-G4XJ Roundup Cross-site Scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter...
CVE-2012-6132
Cross-site scripting XSS vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter...
PYSEC-2014-96
Cross-site scripting XSS vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter...
CVE-2012-6132
Cross-site scripting XSS vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter...
CVE-2012-6132: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter...
PT-2014-2373
Name of the Vulnerable Software and Affected Versions Roundup versions prior to 1.4.20 Description The issue allows remote attackers to inject arbitrary web script or HTML via the otk parameter, which can lead to cross-site scripting XSS attacks. Recommendations For versions prior to 1.4.20, upda...