428 matches found
Cross-site Scripting (XSS)
Roundup is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of classhelpers generic.help.html which results in XSS...
Roundup Cross-site Scripting Vulnerability
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents...
GHSA-XJGW-GHRX-WFFF Roundup Cross-site Scripting Vulnerability
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
Roundup Cross-site Scripting Vulnerability
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
Roundup Cross-site Scripting Vulnerability
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
GHSA-W8VC-CWV9-WX67 Roundup Cross-site Scripting Vulnerability
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
GHSA-X37X-QF4V-F54F Roundup Cross-site Scripting Vulnerability
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents...
CVE-2024-39126
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents...
CVE-2024-39124
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
CVE-2024-39125
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
CVE-2024-39126
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents...
CVE-2024-39124
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
CVE-2024-39125
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
PYSEC-2024-64
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
PYSEC-2024-63
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
UBUNTU-CVE-2024-39125
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
UBUNTU-CVE-2024-39124
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
PYSEC-2024-64
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...
