Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.
| Software | From | Fixed in |
|---|---|---|
| roundup-tracker / roundup | 1.4.13 | 1.4.13.x |
| roundup-tracker / roundup | 1.4.7 | 1.4.7.x |
| roundup-tracker / roundup | 1.4.17 | 1.4.17.x |
| roundup-tracker / roundup | 1.4.15 | 1.4.15.x |
| roundup-tracker / roundup | 1.4.8 | 1.4.8.x |
| roundup-tracker / roundup | 1.4.1 | 1.4.1.x |
| roundup-tracker / roundup | 1.4.14 | 1.4.14.x |
| roundup-tracker / roundup | 1.4.12 | 1.4.12.x |
| roundup-tracker / roundup | 1.4.4 | 1.4.4.x |
| roundup-tracker / roundup | 1.4.16 | 1.4.16.x |
| roundup-tracker / roundup | 1.4.9 | 1.4.9.x |
| roundup-tracker / roundup | 1.4.10 | 1.4.10.x |
| roundup-tracker / roundup | 1.4.3 | 1.4.3.x |
| roundup-tracker / roundup | 1.4.6 | 1.4.6.x |
| roundup-tracker / roundup | 1.4.0 | 1.4.0.x |
| roundup-tracker / roundup | 1.4.2 | 1.4.2.x |
| roundup-tracker / roundup | - | 1.4.19.x |
| roundup-tracker / roundup | 1.4.18 | 1.4.18.x |
| roundup-tracker / roundup | 1.4.5 | 1.4.5.x |
| roundup-tracker / roundup | 1.4.11 | 1.4.11.x |