Vulnerability Database

Published: Apr 6, 2019
Updated: Nov 9, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10904" target="_blank" rel="noopener"> CVE-2019-10904
GHSA: <a href="https://github.com/advisories/GHSA-926q-wxr6-3crq" target="_blank" rel="noopener"> GHSA-926q-wxr6-3crq
Severity: Low
Exploit:

309,136

Total vulnerabilities in the database

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.

CVSS v2:

CWEs:

OWASP TOP 10:

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.